Can you describe an end-to-end design for a multi-tenant retrieval-augmented generation system?