Add Project & Workspace MCP System with role-based permissions

- Add roboco_project_* tools (list, get, create, update) with CEO bypass
  - Add roboco_workspace_* tools (ensure, status, list) for workspace management
  - Add project_slug and requires_git fields to TaskCreateInput schema
  - Validate project exists and cell matches when creating git-enabled tasks
  - Register project MCP server in orchestrator with proper permissions

  Workspace permissions by role:
  - Developer: Write to own workspace only
  - QA: Read-only access to all cell workspaces
  - Documenter: Write to all cell workspaces (add docs to dev branches)
  - Cell PM: Write to own workspace, project_update for own cell
  - Main PM: Full project access (create, update all, workspace_list all)
  - CEO: Full bypass on all permission checks

  Also includes:
  - Git templates for commits, branches, PRs (separation of concerns)
  - Updated blueprints with project/workspace tools documentation
  - Updated RAG docs with project tools reference

agents/prompts/roles/cell_pm.md

@@ -141,6 +141,14 @@ When ALL subtasks done: reflect + complete your task.
 - `roboco_kb_search`, `roboco_rag_query`, `roboco_kb_stats`
 - `roboco_kb_index_code`, `roboco_kb_index_docs`
 
+**Project & Workspace (Your Cell Only):**
+- `roboco_project_list(cell)` - List your cell's projects
+- `roboco_project_get(slug)` - Get project details
+- `roboco_project_update(slug, ...)` - Update your cell's project settings
+- `roboco_workspace_ensure(project_slug)` - Create/access your workspace
+- `roboco_workspace_status(project_slug)` - Check workspace state
+- `roboco_workspace_list(project_slug)` - List all workspaces in your cell
+
 **Agent-to-Agent (A2A) - Cross-Cell Coordination:**
 - `roboco_agent_discover(role, team, skill)` - Find agents across cells
 - `roboco_agent_request(target_agent, skill, message, task_id)` - Send message (task_id required)