Add workspace network policy and published ports

Replace the workspace-level boolean network toggle with explicit network policies and attach localhost TCP publication to workspace services.

Persist network_policy in workspace records, validate --publish requests, and run host-side proxy helpers that follow the service lifecycle so published ports are cleaned up on failure, stop, reset, and delete.

Update the CLI, SDK, MCP contract, docs, roadmap, and examples for the new policy model, add coverage for the proxy and manager edge cases, and validate with uv lock, UV_CACHE_DIR=.uv-cache make check, UV_CACHE_DIR=.uv-cache make dist-check, and a real guest-backed published-port probe smoke.

examples/python_workspace.py

@@ -21,6 +21,7 @@ def main() -> None:
         created = pyro.create_workspace(
             environment="debian:12",
             seed_path=seed_dir,
+            network_policy="egress+published-ports",
             secrets=[
                 {"name": "API_TOKEN", "value": "expected"},
                 {"name": "FILE_TOKEN", "file_path": str(secret_file)},
@@ -60,11 +61,13 @@ def main() -> None:
                 command="touch .web-ready && while true; do sleep 60; done",
                 readiness={"type": "file", "path": ".web-ready"},
                 secret_env={"API_TOKEN": "API_TOKEN"},
+                published_ports=[{"guest_port": 8080}],
             )
             services = pyro.list_services(workspace_id)
             print(f"services={services['count']} running={services['running_count']}")
             service_status = pyro.status_service(workspace_id, "web")
             print(f"service_state={service_status['state']} ready_at={service_status['ready_at']}")
+            print(f"published_ports={service_status['published_ports']}")
             service_logs = pyro.logs_service(workspace_id, "web", tail_lines=20)
             print(f"service_stdout_len={len(service_logs['stdout'])}")
             pyro.stop_service(workspace_id, "web")