post
https://api.qfp.quantnetwork.net/api/templates
Creates a template visible only to the caller's tenant. The key must
not already exist in tenant or SYSTEM scope.
defaultContent is not validated against the context catalog
here (unlike POST /api/system-templates), so invalid rules are only
rejected later, when a policy is created from the template.

