Tenant-scoped docs with threaded comments, scoped search, and share links.

The document slice now does more than store text. You can search titles, bodies, or comments, add real threaded notes, and rotate a public share token when a document needs to go wider.