Secure access layer for managed workspace operations.

This endpoint fronts internal workspace tooling, identity-aware routing, and environment controls. Access is limited to approved operators and managed devices.