List workspaces accessible to the caller

Return every HeyMilo workspace the authenticated caller can operate on. API-key callers always receive a single entry; OAuth callers receive every workspace they are a member of and may pass X-Workspace-Id: <id> on subsequent calls to scope operations to a specific workspace.