pranavjangam500-eng/LOS-Backend ? reverse-engineered prompt

Build me a secure multi tenant Loan Origination System backend in Spring Boot that can handle more than one bank and route requests to the right tenant automatically.

I want users to be able to sign up, log in with JWT, log out, and have roles and permissions for different kinds of users like admins and staff. Please include strong security basics too, like password rules, account lockout after repeated failed logins, request throttling, CORS settings from config, input sanitizing, and safe error responses that do not leak sensitive details. It should also expose Swagger docs so the API is easy to test, and be set up to run with PostgreSQL for normal use and H2 for local development.

If anything is unclear, use the README and existing docs first, and look up current Spring Boot or security docs online if needed.