Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/fix-svc-test-port-governance-deploy-txn.md; R0=cb36b59accd0418c5ca952912d7c181b83038a4c.
Impact: task metadata only; the feature workspace starts at cb36b59acc.
Refs: .task/fix-svc-test-port-governance-deploy-txn.md