Provision Agent Workspace

Isolation, lifetime, and network must match data sensitivity. Do not over-provision a VM for a file edit. Secrets, network, and lifetime that are "we'll tighten later" are the product.

Open provider selection for the selected isolate. Open recipes and acceptance when attaching or tearing down a workspace.