Allow multi-org hypervisors

Hypervisor consumers should now be unique per org, not completely
unique.  Consumer now has a HypervisorId (one-to-one) which
enforces a unique constraint on hypervisor id per org.

All host and guest consumer lookups are limited to the requestors
org
Migrate hypervisor data
add some security