-- Per-tenant app/admin access kill switch (shared physical servers stay up)

ALTER TABLE "tenants"
  ADD COLUMN IF NOT EXISTS "server_access_blocked" BOOLEAN NOT NULL DEFAULT false;

ALTER TABLE "tenants"
  ADD COLUMN IF NOT EXISTS "server_access_blocked_at" TIMESTAMP(3);