Customer portal — Rental tab (tenant self-serve)

When the rentalManagement module is active and a Contact is the named tenant on a lease, the customer portal grows a Rental tab. This is the tenant's primary touchpoint with the landlord.

What tenants can do:
• **Pay rent** — current invoice, balance, payment history, one-click pay (card or ACH). Auto-pay opt-in for monthly rent day.
• **View lease** — verified-by-Turtini PDF of the active lease, all addenda, executed renewals.
• **Submit maintenance** — category + urgency + description + photo. Status updates push to the tenant in real time as the work order moves through Submitted → Acknowledged → Scheduled → In progress → Completed.
• **Request inspection** — "annual inspection is overdue, please schedule" or "I'd like a post-repair walkthrough".
• **View inspections** — completed move-in / move-out / annual reports, signed copies for download.
• **Documents** — anything the landlord shares (rules, parking permits, lead-paint disclosure).
• **Contact landlord** — a private threaded conversation back to the property manager.

What's hidden from tenants:
• Other tenants in the same building
• Landlord's accounting, GL, vendor data
• Background-check results or eviction case files
• Internal cost lines on maintenance work orders
• Any data outside this tenant's specific lease

Multi-tenant leases:
Two roommates on a single lease both see the Rental tab on their own portal. Either can pay rent; both see maintenance threads each other creates. The lease PDF is the same document for both.

What landlords need to do to enable:
The tenant gets portal access automatically when their Contact has an email and they're named on a lease. The first time the tenant tries to log in (e.g. clicks "Pay rent" in the org-branded reminder email), the portal walks them through password setup.