pk's personal workspace surface.
Type: frontend
Status: skeleton — landing door only. Real surface lands in subsequent rounds.
Depends on: auth-allowlist
Notes: Plan-fresh. No source module. Note: 'pk2' is also the marker for pk's hardware device in machines-client registry — collision is intentional (the surface is owned by the device).