Workspaces as the unit of isolation
One workspace per project / tenant / environment. Each owns its knowledge bases, agents, services, documents, jobs, credentials, and API keys β with cascade-delete formalized in the store contract so cleanup is exhaustive.