IgnoreTenantScope: when true (set by the controller only
for verified Platform Admins), the handler skips the "TenantId required"
guard and the repository returns the FULL module catalog regardless of
TenantId — this is the "Gestión de Módulos" system-wide
admin screen's use case, where the caller's own home tenant is irrelevant.
Regular (non-platform-admin) callers are unaffected — they still require
a real TenantId and get the tenant-scoped result (e.g.
the dashboard widget module picker, which must only show the CALLER's
own tenant's modules).