Feature/provisioner apis

hm there are still race conditions since 2 tables are being updated plus the provisioner calls.  Another option would be to split this into 2 calls and only allow deleting a tenant if its workers are already set to 0.