This seeded workspace is the only directory exposed to the filesystem MCP server.
Do not place credentials or production policy records here.
