Infer ORD tenant from Basic Auth

[Fannon]

Summary

• Protects the system-instance ORD document with the standard Basic Auth access strategy.
• Infers tenant context from the authenticated user and prevents URL selectors from overriding it.
• Updates the reference documentation and integration tests for both demo tenants.
• Adds the missing Jest utility peer so the existing test command runs successfully.