The selected workspace's credit wallet. The wallet is workspace-owned
(shared by every member); this field is kept on User for frontend
compatibility and resolves via the viewer's active workspace by default.
An explicit workspaceId (API-key / MCP callers) selects a different
wallet after the same per-request membership verification. Null when
no workspace selection can be resolved.