feat: open the project workspace with view

[iperev]

Summary

• Add view --repo-root . as the project workspace entry. The default returns a bounded plan; --serve starts the existing loopback workspace and --open explicitly opens a browser.
• Capture one admitted project and its manifest-routed source bytes. Preserve source identities, original JSON pointers, per-source restrictions and Unicode selections through browser lookup and one-shot handoff.
• Introduce the explicit project-origin context variant while preserving predecessor wire contracts. Reuse child-owned project projections instead of reparsing their raw inputs.
• Keep full-length requirement IDs reference-closed in graphs and session anchors. Validate options before repository inspection and make multiply-invalid option diagnostics deterministic.
• Retain cleanup-before-output semantics and installed-carrier command smoke. Prepare the reviewed compatible 0.14.0 release record.

Review And Verification

The feature received independent architecture, authority, structural,
governance and test-oracle review, followed by bounded reviews of the admitted
repairs. Static review does not replace native or provider execution.

• Complete npm run check passed on the clean commit
  3389c2077e75924fa5695b2cecf0e6181b40657e, using the repository-pinned npm
  12.0.2. This includes 315 browser scenarios across Chromium, Firefox and
  WebKit, package verification, self-hosting and release closeout.
• Self-hosting: 109/109 requirements bound, 382 scenarios, 92 command routes.
• Affected app/browser/graph race checks passed. The project handoff and
  cleanup tests additionally passed 20 race-detector repetitions after the
  watchdog correction.
• Three isolated ignored-operation/ambient-read mutations were rejected by
  their independent tests; original production bytes were restored.
• All applicable exact-head GitHub checks are required before squash merge.

Boundaries

The workspace reads only the explicit project and its declared source cohort.
It does not scan the repository, edit specifications, execute witnesses, prove
receipt freshness or infer release/rollout readiness. Missing coverage and
baseline views remain explicitly unavailable. Project-origin source identity
is observed content binding, not independent expected-digest authority.

Design documents, implementation plans and local review evidence are not part
of the published package or this pull request.