Nile isolates Postgres tenants with a tenant_id column and one session variable

Querying a tenant-aware table on Nile with no nile.tenant_id set returns every tenant's rows. I tested Nile's tenant isolation, its write-path guard, and a few things it refuses.