feat(auth): enhance JWT claims and app switcher configuration

- Added support for optional tenant IDs in JWT claims for user permissions.
- Updated auth routes to include tenant information in the JWT payload.
- Enhanced app switcher configuration to handle tenant IDs without exposing them publicly.
- Improved documentation for EvoBGP tenant ID integration and its usage in JWT.

apps/web/src/components/reui-kit/app-switcher-admin-editor.tsx

@@ -92,6 +92,22 @@ export function AppSwitcherAdminEditor({
                     placeholder="https://…"
                   />
                 </Field>
+                {appId === 'bgp' ? (
+                  <Field className="sm:col-span-2">
+                    <FieldLabel htmlFor={`tenant-${appId}`}>
+                      EvoBGP tenant ID
+                    </FieldLabel>
+                    <Input
+                      id={`tenant-${appId}`}
+                      {...form.register(`apps.${appIndex}.tenantId`)}
+                      placeholder="UUID тенанта из EvoBGP"
+                    />
+                    <p className="text-muted-foreground text-xs">
+                      Попадает в JWT (`bgp_tenant_id` / `tenants.bgp`). Публичный
+                      switcher его не отдаёт.
+                    </p>
+                  </Field>
+                ) : null}
                 <Field className="sm:col-span-2">
                   <FieldLabel htmlFor={`subtitle-${appId}`}>
                     Описание