Brand kit

3-tier inheritance: Group inclusivity rules → Tenant brand → Campus override. Applied to tour widget, application portal, and generated content sign-offs.

Spec ref: §v5.0 §3.1