Redesign the global moderation-config violation tally for tenant scoping

**Problem:** The cross-repo violation tally in the moderation-config system is shared globally by design — the same leak shape as the blacklist and agent-controls issues above.

**Area:** ORB / Cloud

**Proposal:** Make the tally tenant-scoped, matching the pattern established by the other multi-tenancy fixes in this category.

**Deliverables:**
- A tenant-scoped violation tally.
