Core-backed agent workspace, starting read-only.

The staging portal is being split into a workspace and an admin console, while provider adapters keep the platform independent from any single legacy backend.