Get Preloaded Context Claims

Knowledge injected into agent context for this workspace.

The workspace is resolved server-side from the workspace the caller already proved they own, so a client cannot widen its own read by asking for another workspace's global knowledge.

run_scope narrows the read to claims filed inside one isolated-run namespace. It can only ever shrink the result set, so it needs no authorization of its own beyond the workspace ownership check above.