Describe the problem

The code in kvserver/reports/reporter.go, zoneResolver, uses keys.TODOSQLCodec to reverse-engineer which zone configs apply to which ranges.

This means the code is not able to distinguish data for secondary tenants.

Expected behavior

The replication reports should check the tenant-specific zone configs applying to each secondary tenant.

Presumably, the replication reports should not use the zone config data in SystemConfigSpan any more, and instead use the new span config infrastructure.

Slack discussion here.

UX considerations

The primary goal of this issue is to make the cross-tenant replication works in the system tenant.

We can have a separate discussion about whether we want per-tenant replication reports as well. This is out of scope here.

Epic CRDB-10630

Jira issue: CRDB-16708