Request governed spaces without leaving CAPI

CAPI gives teams a clear path to request tenant-backed spaces, track approval, and start with the right access once an admin approves.

Admins review pending spaces, approve tenant creation, and keep ownership tied to the creating user.