feat(webui): add project workspaces and access controls (#4007)

* feat(webui): add project workspaces and access controls

* feat(webui): add project workspaces and access controls

* refactor(tools): centralize workspace access resolution

* refactor(webui): remove unused workspace host state

* fix(webui): hide estimated file edit label

* fix(webui): clarify file edit deletion feedback

* fix(webui): label deleted file activity

* fix(webui): flatten file edit activity rows

* fix(core): remove path-only patch deletion

* fix(core): keep apply patch non-destructive

* refactor(webui): trim workspace host plumbing

* fix(tools): register exec with tools config

tests/test_tool_contextvars.py

@@ -65,6 +65,7 @@ async def test_spawn_tool_keeps_task_local_context() -> None:
             session_key: str,
             origin_message_id: str | None = None,
             temperature: float | None = None,
+            workspace_scope=None,
         ) -> str:
             seen.append((origin_channel, origin_chat_id, session_key))
             return f"{origin_channel}:{origin_chat_id}:{task}"
@@ -178,6 +179,7 @@ async def test_spawn_tool_basic_set_context_and_execute() -> None:
             session_key,
             origin_message_id=None,
             temperature=None,
+            workspace_scope=None,
         ):
             seen.append((origin_channel, origin_chat_id, session_key))
             return f"ok: {task}"
@@ -211,6 +213,7 @@ async def test_spawn_tool_default_values_without_set_context() -> None:
             session_key,
             origin_message_id=None,
             temperature=None,
+            workspace_scope=None,
         ):
             seen.append((origin_channel, origin_chat_id, session_key))
             return "ok"