Add independent executor, workspace hibernation and shared resource budgets

Redesign monochrome admin with live metrics and inline command logs

Allow secure admin dashboard in HF iframe

Add token-protected workspace admin dashboard

Add persistent workspaces and background workflows

Fix RUNTIME_ERROR: disable SSR so uvicorn can bind 7860 (HF sets GRADIO_SSR_MODE=True)

Token on every route; run tools in-process (queue=False), drop loopback exemption

Add MCP server entrypoint