List access-filtered Workspace activity

Returns a newest-first, cursor-bounded page of meaningful work changes. Activity is projected from immutable domain events at read time using the caller's current access. Only registered activity types appear: progress, ownership, deadline, priority, milestone, description, blocking-dependency, comment, document, Project and Milestone changes. Personal preferences (following or muting), ordinary reactions, ordinary title corrections, configuration, security, session, identity, membership, integration, and Agent execution events never appear here; an ordinary edit remains available in that item's own history. action is a stable localization key, not a rendered sentence, and summary never includes comment, Document, or other free-form content. Events from one command or one editing session collapse into a single item: count says how many events it represents and affected lists up to 25 of the resources a bulk change touched. Private Project resources are filtered before pagination and grouping, so items, cursors, has_more, and affected cannot disclose inaccessible work. limit bounds the events examined, so a page may hold fewer items than limit; only has_more says whether history continues. provenance distinguishes mediated actions while preserving the stable Actor; a group carries the least direct classification among its members. Optional paired day and time_zone select one civil day's inclusive local midnight to exclusive next midnight, including DST changes. The indexed time range applies before pagination and counting; cursors are bound to that interval. Existing 90-day retention still applies.