feat: add paste audience policy

[darwin67]

Summary

• rename paste visibility to workspace, unlisted, and public audiences while preserving legacy API compatibility
• add owner-controlled workspace external-sharing policies and clamp existing paste audiences when policies tighten
• enforce workspace membership and current sharing policy across HTML, raw, and API access, including concurrent policy changes

Testing

• make lint
• mix precommit (375 tests passed)