remediation-tool: fix tenant-sweep tier name; mark Kittle partially onboarded

- tenant-sweep.sh line 12: renamed tier `graph` to `investigator` to match
  the valid tier name expected by get-token.sh
- tenants.md: updated Kittle Design & Construction consent status from NO
  to PARTIAL with notes on what was consented and what remains pending

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.claude/skills/remediation-tool/scripts/tenant-sweep.sh

@@ -9,7 +9,7 @@ set -euo pipefail
 SCRIPT_DIR="$(dirname "${BASH_SOURCE[0]}")"
 TENANT_INPUT="${1:?usage: tenant-sweep.sh <tenant-id|domain>}"
 TENANT_ID=$("$SCRIPT_DIR/resolve-tenant.sh" "$TENANT_INPUT")
-GT=$("$SCRIPT_DIR/get-token.sh" "$TENANT_ID" graph)
+GT=$("$SCRIPT_DIR/get-token.sh" "$TENANT_ID" investigator)
 
 OUT="/tmp/remediation-tool/$TENANT_ID/sweep"
 mkdir -p "$OUT"