Live workspace

A separate tenant for real documents processed at runtime. The curated demo portfolio is untouched. Every processed document writes a provenance event and a proposed staging record — promotion still requires a Part 11 signature.