Multi-identity: one operator, several identities across planes

open   by a73x

Labels: backlog

[claude 2026-08-18] Carried in notes as #9. Design thread, not a defect: the CLI and
console assume one identity per operator, and quotas/allocatable, the declared-cap
work, and the public gateway all press on it. Standing steering is "quotas =
allocatable" (the kubelet-shape direction), so scope this design-first before code.