Create the first workspace.

Each workspace starts with empty memory, empty secrets, a private usage wallet, and no shared project data.

After sign-in, workspace creation should write only to the dedicated Ownerlane control plane.