feat: add scoped workspace fetch and publish handlers

[chubes4]

Summary

• add new workspace fetch handler that emits structured repository audit context and scoped read tools (workspace_fetch_ls, workspace_fetch_read)
• add new workspace_publish handler with scoped mutation tools (workspace_write, workspace_edit, and gated git tools)
• add WorkspaceScopedTools shared implementation to enforce repo/path scoping at tool execution time
• wire both handlers into core handler bootstrap and add unit coverage for scoped tool availability

Why

This implements least-privilege workspace automation by making mutation tools available only through explicit adjacent handler configuration.

Testing

• php -l inc/Core/Steps/Workspace/Tools/WorkspaceScopedTools.php
• php -l inc/Core/Steps/Fetch/Handlers/Workspace/Workspace.php
• php -l inc/Core/Steps/Fetch/Handlers/Workspace/WorkspaceSettings.php
• php -l inc/Core/Steps/Publish/Handlers/Workspace/Workspace.php
• php -l inc/Core/Steps/Publish/Handlers/Workspace/WorkspaceSettings.php
• homeboy test data-machine --skip-lint --path="/var/lib/datamachine/workspace/data-machine" --setting database_type=mysql --setting mysql_host=localhost --setting mysql_database=extrachill --setting mysql_user=extrachill --setting mysql_password= -- --filter WorkspaceScopedToolsTest

Related

• Closes Add Workspace Fetch handler with scoped AI read tools #614
• Closes Add Workspace Publish handler with scoped write/edit + git commit/push workflow #615
• Ref Add generic Workspace Audit Fetch handler for scoped file inventory and drift analysis #618
• Ref Add scoped workspace tool exposure model (global read, handler-scoped write/mutate) #619

[github-actions]

Homeboy Results — data-machine

Tooling versions

• Homeboy CLI: homeboy 0.56.0
• Extension: wordpress from https://github.com/Extra-Chill/homeboy-extensions
• Extension revision: unknown
• Action: Extra-Chill/homeboy-action@v1

ℹ️ PR test scope resolved to full for compatibility with installed Homeboy CLI

✅ lint (changed files only)

• PHPCS: LINT SUMMARY: 2 errors, 19 warnings
• Fixable: 16 | Files with issues: 6 of 11
• PHPStan: PHPSTAN SUMMARY: 133 errors at level 5

---

Homeboy Action v1 — homeboy 0.56.0