为解决多项目共用系统 /tmp 导致下载的 JS/HTML 等文件互窜的问题，新增按会话隔离的工作目录：默认落在 tmp/workspace/，已绑项目时用 projects/<项目ID>/，未绑项目时用 conversations/<对话ID>/。每次 Agent 启动时自动创建目录，并将路径注入四种主模式（eino_single、deep、plan_execute、supervisor）的系统提示，引导下载与 read_file/glob/grep 都在该目录下进行；可通过 agent.workspace_root_dir 自定义根路径。删未绑项目的会话会清理对应工作区，删项目会清理整个项目工作区。
To fix cross-project file contamination from agents downloading and reading assets under the shared system /tmp, CyberStrikeAI now provisions an isolated session workspace under tmp/workspace/—projects// when a conversation is project-bound, otherwise conversations//. The directory is created on each agent run and injected into the system prompt for all four main modes (eino_single, deep, plan_execute, supervisor), directing downloads and local analysis (read_file/glob/grep) away from /tmp. The root path is configurable via agent.workspace_root_dir; unbound conversations clean up on delete, and project workspaces are removed when the project is deleted.