Core: runtime driver loading, auth, ACLs, and version-safe workspaces

[FerdinandSu]

Scope

Track foundational VeryFS.Core capabilities needed before the public API can be considered stable.

Checklist

• Runtime driver loading.
• Capability negotiation.
• Signed service and user request authentication.
• ACL and ownership management APIs.
• Version-safe writes and configurable retention.
• Workspace export for external tools.

Acceptance Criteria

• Drivers can be discovered and loaded through a stable contract.
• Clients can inspect capabilities before attempting operations.
• Service and user requests have explicit authentication and authorization semantics.
• Write paths preserve data safety through version-aware behavior.
• Workspace export is deterministic enough for automation and AI agents.

Source

Roadmap section: docs/roadmap.md / Core.