feat: scope workflows and webhooks to workspace (#132)

fix: prevent Docker build failure when pnpm lockfile is missing (#130)

feat: audit hardening, webhook retry, and local Claude session tracking (#68)

test: add 52 Playwright E2E tests covering all critical fixes