DefaultDatasetQueryRequestScope
Reads the tenant from the {tenantId} path variable, else Command-Tenant-Id; the owner from Command-Owner-Id and the space from Wow-Space-Id, each only when the dataset has that column. Every value comes from the request, so each is declared; override provenance when a trusted component (an authenticating gateway that owns these headers, say) vouches for them.