feat(metadata): add tenantId for multi-tenant isolation and update sorting in DatabaseLoader

Author: hotlong

content/docs/references/system/metadata-persistence.mdx

@@ -271,6 +271,7 @@ const result = MetadataCollectionInfo.parse(data);
 | **owner** | `string` | optional |  |
 | **state** | `Enum<'draft' \| 'active' \| 'archived' \| 'deprecated'>` | ✅ |  |
 | **organizationId** | `string` | optional | Organization identifier for multi-tenant isolation |
+| **tenantId** | `string` | optional | Tenant identifier for multi-tenant isolation |
 | **environmentId** | `string` | optional | Environment ID — null = platform-global, set = env-scoped |
 | **version** | `number` | ✅ | Record version for optimistic concurrency control |
 | **checksum** | `string` | optional | Content checksum for change detection |

packages/metadata/src/loaders/database-loader.ts

@@ -562,7 +562,10 @@ export class DatabaseLoader implements MetadataLoader {
 
     const historyRecords = await this._find(this.historyTableName, {
       where: historyFilter,
-      orderBy: [{ field: 'recorded_at', order: 'desc' as const }],
+      orderBy: [
+        { field: 'recorded_at', order: 'desc' as const },
+        { field: 'version', order: 'desc' as const },
+      ],
       limit: limit + 1,
       offset,
     });

packages/metadata/src/metadata.test.ts

@@ -550,7 +550,7 @@ describe('MetadataPlugin', () => {
 
     // Verify setDataEngine was called on the manager with ObjectQL
     const manager = (plugin as any).manager;
-    expect(manager.setDataEngine).toHaveBeenCalledWith(mockObjectQL);
+    expect(manager.setDataEngine).toHaveBeenCalledWith(mockObjectQL, undefined, undefined);
   });
 
   it('should bridge ObjectQL AFTER filesystem metadata loading', async () => {

packages/spec/src/system/metadata-persistence.zod.ts

@@ -99,6 +99,9 @@ export const MetadataRecordSchema = z.object({
   /** Organization ID for multi-tenant isolation */
   organizationId: z.string().optional().describe('Organization identifier for multi-tenant isolation'),
 
+  /** Tenant ID for multi-tenant isolation (alias of organizationId in some contexts) */
+  tenantId: z.string().optional().describe('Tenant identifier for multi-tenant isolation'),
+
   /** Environment ID — null means platform-global, set means env-scoped */
   environmentId: z.string().optional().describe('Environment ID — null = platform-global, set = env-scoped'),