Designing Multi-Tenant SaaS on PostgreSQL

How I choose a tenant isolation model, enforce it with constraints and row-level security, and handle the parts that are easy to forget: caches, background jobs, per-tenant configuration and the admin back-office.