Create project first with API-derived first workspace and do not auto-deploy by default

Project hostname label seed. Exact platform-reserved labels, and labels ending in -functions, -containers, -fn-<8 hex> or -ctr-<8 hex> (runtime host suffixes), return project-name-reserved before generic invalid-name classification.