For the report and filtering, useful to have a field to separate platform and services from various tenants.

Could be as simple as a field validated on PR to the changelog repo by us (services onboard with the services.yml). Or maybe have another file, tenant.yml, that defines the groups, and, when migrating the yml, we make sure the group listed under each file is a part of that tenant.yml. (It's a small validation but easy to maintain).