implement new tenancy handling logic for satellite connections

https://docs.google.com/document/d/12rWfXotDL-ZTriWq0naEjfnujPSxwNkAoir8Avha5S4/edit

• remove old logic that looks in the "online" message for the permitted tenants list
• remove permitted tenants column (later...maybe a new ticket...tech debt)
• create a new impl of the connection locator interface that works like this:
  • if org_id and client_id match incoming org_id and client_id, return match
  • or if client_id matches and dispatchers contain satellite worker, return match (this lookup ignores the org_id/account if its a satellite connection)
• make the connection lookup impl (tenancy) configurable