lifecycle: only create tenant media root if needed #22689

Job	Run time
lint-golint	44s
test-unittest	3m 17s
ci-outpost-mark	1s
build-binary (proxy, linux, amd64)	1m 56s
build-binary (proxy, linux, arm64)	2m 6s
build-container (proxy)	4m 12s
build-binary (ldap, linux, amd64)	1m 51s
build-container (ldap)	2m 15s
build-binary (ldap, linux, arm64)	2m 14s
build-container (radius)	2m 32s
build-binary (radius, linux, amd64)	1m 53s
build-container (rac)	2m 20s
build-binary (radius, linux, arm64)	2m 0s
build-binary (rac, linux, amd64)	1m 58s
build-binary (rac, linux, arm64)	2m 7s
	31m 26s

Provide feedback