Shift coverage soft-rules.

Shipped: Same-tenant read gate. Coverage records create + update with same-tenant + own-employee or ELEVATED. Soft fields explained in tooltips so an employee can see why a swap was rejected.