Managed workspace storage

Enforces project-local destinations for supported report-writing operations.

The shared helper applies the Faye storage policy when a command writes managed output. Ordinary stdout analysis remains separate from managed directory setup.