We should move the control of the dest tenant from user to the ingestion job:
- Create the tenant if it doesn't not exists.
- Users should not be able to access tenant data during stream replication as we may see inconsistent/half state state.
- Make the tenant online after cutover.
Jira issue: CRDB-13343
Epic: CRDB-10146