feat: harden self-managed reconciliation

tests/server/workspace-store.test.ts

@@ -16,7 +16,6 @@ describe("workspace store", () => {
       "Upper",
       "has_dot",
       "kube-public",
-      "kuber-system",
       "database",
       "garage-system",
       "routing",
@@ -25,6 +24,12 @@ describe("workspace store", () => {
         WorkspaceValidationError,
       );
     }
+
+    await expect(
+      store.create({ id: "kuber-system", source }),
+    ).resolves.toMatchObject({
+      metadata: { name: "kuber-system" },
+    });
   });
 
   test("creates immutable revisions and uses ETags for replacement", async () => {