Support ChatGPT workspace allowlists

Add a shared forced ChatGPT workspace ID type that accepts either a single workspace string or a list of workspace strings. Update config loading, login enforcement, browser/device-code auth, external auth, app-server protocol, and TUI local auth to allow any configured workspace. Regenerate config/app-server schemas and Python SDK generated types, and document the string/list config forms.