Creates (or returns) the workspace's skill inventory for a connected SCM provider, deriving the org-equivalent from the workspace's integration. This is the backend-driven bootstrap for the read-only scan model: after connecting a provider, create the inventory here, opt it into private indexing, then start a scan. Returns 422 (scm_not_connected) when the workspace has no integration for the requested provider. created is false when the inventory already existed.