Multi-tenant federated RAG privacy enclave & ZK attestation (Confidential RAG style)