Bootstrap self-managed workspace listings

[abrookins]

Stacked on #12.

Problem

In self-managed mode, the control plane could start against a Redis instance that already contained real workspaces, but /v1/workspaces still came back empty until someone manually created a database record with POST /v1/databases.

That made existing workspace data look missing on first boot even though the Redis state was already there. It also made workspace-first routes look less reliable than they actually were.

Why this change

The startup path was only loading catalog database profiles. If the catalog was empty, the manager refreshed nothing, so catalog-backed workspace listing had no database to fan out through.

The fix needs to restore first-run visibility without changing the separate blank-store flow. If Redis is actually empty, startup should still stay empty and let ListDatabases, Quickstart, or an explicit database create drive bootstrap.

What changed

• OpenDatabaseManager now performs a startup-only bootstrap pass before the initial catalog refresh.
• That startup bootstrap only materializes a database profile when the configured Redis already contains workspaces.
• When live workspaces already carry a database identity, the bootstrap path adopts that identity instead of inventing a parallel Local Development record.
• Request-time bootstrap behavior remains in place for the existing ListDatabases and Quickstart flows.
• Regression coverage now covers both halves of the contract:
  • empty self-managed stores stay unregistered on startup
  • preexisting local workspaces are visible without a manual POST /v1/databases
• The single-database HTTP fixture now uses the same default local workspace metadata shape as the real product.

Testing

• go test ./internal/controlplane
• go test ./cmd/afs -run 'TestCmdImportSelfHostedForceReplacePreservesVersioningHistory|TestCloudModeUsesHTTPControlPlaneBackend|TestOpenAFSControlPlaneSelfHostedSingleDatabaseStillWorksWithoutConfiguredDatabase|TestPrepareSyncBootstrapSelfHostedIgnoresStaleConfiguredDatabaseForWorkspaceFirstRoutes|TestDatabaseListAndUseSelfHosted|TestRunSetupWizardSelfHostedPicksExistingWorkspace|TestRunSetupWizardSelfHostedSupportsLiveMountMode'
• make test

[jit-ci]

🛡️ Jit Security Scan Results

✅ No security findings were detected in this PR

---

^{Security scan by Jit}