Add `namespace` feature?

The incarnations should be isolated according to the staging/production env, and using `namespace` should be a solution. It can make foxops service more secure, e.g. this can avoid deleting prod's incarnation from a staging env.

This is also related to multi-tenancy.  a namespace = a tenant?  A tanant may have multiple access tokens