* feat(W-026): add read-only workbench API * fix(workbench): harden read-only API review gaps
Docs-only planning branch. Smoke + verify pinned lane SHAs CI checks pass.