Shared CMS scaffold

Tenant content is managed at /admin.

Publishing is intentionally disabled in this first scaffold.