Return the public runtime-context representation.
Fingerprints stay server-side: the payload is workspace identity
(which the client echoes verbatim), while policy and runtime
compatibility are checked against the server-resolved config, not a
client-claimed fingerprint.
