12c737d4f1
Adds two tenant-management verbs tied to molecule-core#2056: - -> PATCH /workspaces/:id - -> PUT /workspaces/:id/model Guards: - set-model relies on workspace-server registry validation (fail-closed). - set-runtime fetches current model and target runtime's offered-model menu (GET /admin/llm/offered-models) and rejects a switch that would orphan the current model. Unknown/federated runtimes fail-open to match server contract. Also adds to the client Workspace struct and integration/unit tests. Fixes #20. Co-Authored-By: Claude <noreply@anthropic.com>