Access the workspace that protects the file.

Production TODO: connect Auth.js providers, magic links, passwordless invites, and tenant-aware session resolution.