New sessions land on top unless created inside a group; prompt tracks current dir relative to workspaces root

Public template: auto-locks at runtime, shows duplicate-to-private widget