Workspace configuration, permissions, and model controls live here.