Fix demo smoke auth and health noise

[DeliciousBuding]

Summary

• Return demo-safe /health and anonymous /api/auth/me responses in demo mode so workspace smoke does not emit 401/502 fetches.
• Move workspace audit job initial data behind the workspace-source facade and update stale page tests to current copy.
• Clear React Compiler lint errors on touched smoke-critical UI primitives and remove private live demo domain from README.

Verification

• python scripts/check_public_boundary.py
• git diff --check
• npm --prefix apps/web run lint
• npm --prefix apps/web run test
• npm --prefix apps/web run build
• Playwright smoke: /workspace, /workspace/start, /workspace/audits, /workspace/reports/black-box?view=audit, /workspace/settings all 200 with badResponses=[] and errors=[]

[gemini-code-assist]

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.