Summary

• Fixes remote-to-local fallback so workspace show homeboy and workspace worktree add homeboy ... can reuse an existing local primary when remote workspace state is present but missing that repo.
• Normalizes workspace worktree add URL/path repo arguments to a matching local primary, and rejects unsupported URL/path arguments instead of creating malformed github://https://... or github:///Users/... handles.
• Bounds cleanup git worktree remove calls and removes the unbounded rm -rf fallback so cleanup apply rows fail clearly instead of wedging on a single worktree.
• Adds focused smokes for listed-primary fallback, remote URL/path rejection, local URL/path normalization, and cleanup removal guardrails.

Fixes #637.
Fixes #638.

Tests

• php -l inc/Workspace/WorkspaceWorktreeCleanupEngine.php
• php -l tests/smoke-worktree-cleanup-remove-guard.php
• php tests/smoke-workspace-local-fallback.php
• php tests/smoke-worktree-cleanup-remove-guard.php
• php tests/smoke-worktree-cleanup.php (fails: existing duplicate skip-row count drift in dirty/artifact/external summary assertions; removal execution and primary/outside safety assertions pass)

AI assistance

• AI assistance: Yes
• Tool(s): OpenCode (openai/gpt-5.5)
• Used for: Drafted the workspace resolution fix, cleanup removal guard, regression smokes, and local verification commands; Chris remains responsible for review and merge.