feat: harden self-managed reconciliation

shared/api.ts

@@ -63,6 +63,9 @@ export type UpdateWorkspaceRequest = Omit<CreateWorkspaceRequest, "id">;
 export type CreateWorkspaceResponse = Workspace;
 export type ListWorkspacesResponse = Page<Workspace>;
 export type GetWorkspaceResponse = Workspace;
+export type WorkspaceTrustResponse = {
+  fingerprints: string[];
+};
 export type DeleteWorkspaceResponse = OperationAcceptedResponse;
 export type AdoptWorkspaceResponse = {
   workspaceId: string;