When you use app credentials what you trigger is the client credentials flow. The token you get will be for the tenant where the app is registered ie partner tenant in this case. If you want to create app registrations and service principals in customer's tenant I believe you need to use the app credentials from the customer's tenant and use this MS graph API to create the application and service principal that you want to create all with no user intervention.
与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…