The tenant: the aggregate's static tenant, else {tenantId}, else Command-Tenant-Id. A non-null body (the command body's tenant) is only checked: it may not contradict a tenant the route fixes.
{tenantId}
Command-Tenant-Id