fix: restrict delegation scope, isolate test workspace, protect perstack.toml#793

FL4TLiN3 merged 3 commits intomainperstack-ai/perstack:mainfrom

fix/delegation-scope-and-workspace-isolationperstack-ai/perstack:fix/delegation-scope-and-workspace-isolationCopy head branch name to clipboard