Bound Workspace assistant capability exposure

Workspace assistant capability selection is independently switchable and remains disabled by default. When enabled, a new run records its catalog and selection versions, exposes only the selected native tools, and can request one validated domain expansion for the next provider round. Discovery returns a compact capability index instead of the full native catalog. Existing permissions, write confirmations, receipts, leases, result IDs, and request budgets remain unchanged.