Fleet Runner operations

Use explicit scope

Select only assets in the active workspace and verify the operator permission before dispatch. Leases, cancellation, retries, and audit events make the lifecycle visible.