Onboarding queue

Approving provisions a fresh tenant row + seeds the default rule pack for the chosen region.