demo-rentals past_due

What these actions do

Suspend serves a billing wall on this tenant's subdomain and its product database is never opened; no data is touched. Reactivate restores service instantly. Support-login mints a signed token valid 5 minutes, scoped to this one tenant — your operator credentials never cross the boundary. Export & hand off downloads a single .tar with this tenant's whole database, the full application source, and a plain-language ownership note — everything they need to walk away and self-host. The promise, made physical.