- GET /api/v1/actions (discovery, 47 actions), GET /api/v1/actions/:id (contract)
- POST /api/v1/actions/:actionId (unified execute via Action Runtime)
- GET /api/v1/v2/resources (resource discovery)
- legacy bridge wraps WorkspaceAction.run into execute (fixed registration)
- ActionContext.organizationId used by legacy bridge for workspace scoping
