Tenant workspace, catalog surfaces, and OIDC-backed sample dashboard.
Use the local OIDC flow to reach the dashboard, tenant APIs, and the shared browser-host surfaces from the same lighter workspace shell.