feat: phase 1 workspace isolation across auth and core APIs (#112)

feat: audit hardening, webhook retry, and local Claude session tracking (#68)

feat: initial open-source release