fix(runtime): tighten unsupported push and workspace extension surfaces#392

Draft

liujuanjuan1984 wants to merge 3 commits intomainfrom

issue-371-push-webhook-security-baseline

Commits on Apr 3, 2026

docs(runtime): clarify unsupported push notification surface (#391)
liujuanjuan1984
committed
fix(runtime): align unsupported push notification contracts (#391)
liujuanjuan1984
committed
fix(runtime): gate workspace mutation extensions by default (#393)
liujuanjuan1984
committed