Return the public runtime-context representation.
Fingerprints stay server-side: the payload is workspace identity (which the client echoes verbatim), while policy and runtime compatibility are checked against the server-resolved config, not a client-claimed fingerprint.
