central portal

Workspace change requests

Owners submit scoped changes here. The portal turns each request into a deterministic work spec, keeps the queue visible, and hands guarded work to the GitHub Actions runner when a branch is ready.