feat(team): add Workstreams and read-only Specs

[theDakshJaitly]

Summary

• add bounded canonical Workstream reads and signed create/update/archive preview/apply across CLI and private Hub
• add fresh-index read-only Spec list/detail with explicit hierarchy, provenance, sources, and Graph grounding
• add real lazy Workstreams/Specs workbenches, capabilities, populated release fixtures, accessibility coverage, and internal Wiki composite reads

Safety and scope

• exactly one immutable Activity per successful canonical Workstream mutation
• no Spec writes, synthesis, refresh, rebuild, background agents, public package-root exports, versioning, release, deployment, Docker, or main changes
• reads remain bounded and noninitializing; Spec reads use one Wiki/Graph snapshot

Verification

• npm run typecheck
• npx vitest run: 168 files / 2646 tests
• Hub web: 128 tests
• Playwright: 34 tests
• npm run build
• npm run eval:test: 85 tests
• packed Project Hub smoke
• checkpoint policy

Pinned calibration

The first draft run intentionally keeps the prior placeholder budgets for the newly-real Workstreams, Specs, and Spec-detail routes. The release-performance artifact will be used only to calibrate those new route assets and browser heaps on pinned Ubuntu 24.04 / Node 22.22.0 using the locked +5% and +15% formulas; no existing budget or product threshold will be widened.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.