feat: deploy portable workspace registry

.env.example

@@ -14,6 +14,17 @@ PI_MODEL=
 PI_THINKING=
 PI_AUTH_FILE=${HOME}/.pi/agent/auth.json
 
+# Git-backed workspace registry. Set the remote only in the installation environment;
+# credentials and SSH/CA files remain outside this repository and are bind-mounted read-only.
+THT_WORKSPACE_REGISTRY_ROOT=/data/workspace-registry
+THT_WORKSPACE_GIT_BRANCH=main
+THT_WORKSPACE_INSTALLATION_ID=local
+# THT_WORKSPACE_GIT_REMOTE=ssh://git@your-git-host/your-org/thoth-workspaces.git
+# THT_WORKSPACE_GIT_CREDENTIALS_FILE=/absolute/path/to/git-credentials
+# THT_WORKSPACE_GIT_CA_FILE=/absolute/path/to/git-ca.pem
+# THT_WORKSPACE_GIT_SSH_KEY_FILE=/absolute/path/to/git-ssh-key
+# THT_WORKSPACE_GIT_KNOWN_HOSTS_FILE=/absolute/path/to/git-known-hosts
+
 # Set these for the selected DWH/vector/embedding adapters.
 THT_DB_NAME=
 THT_DWH_REST_URL=