feat: phase 1 workspace isolation across auth and core APIs (#112)

feat: v1.2.0 — validation hardening, unit tests, quality improvements

feat: add Docker support, session controls, model catalog, API rate limiting

feat: initial open-source release