#393 MEDIUM: Missing tenant isolation in checkpoint queries

absurd_client.py:728-764 - get_checkpoints_for_run() queries by owner_run_id without tenant_id filter. If RLS not enabled, cross-tenant checkpoint access possible. Fix: Add tenant_id to WHERE clause.