Bootstrap Account Session

Issue runtime cookies for account-level routes without picking a workspace.

The workspace picker lists and manages workspaces before one is open, so the response names no workspace and the client loads none. The default workspace row is still ensured, as every bootstrap does, so a first-time account has something to pick. Routes guarded by require_runtime_user alone accept the resulting cookies; workspace-scoped routes still need a workspace header.