Keep repository aliases valid across workspace membership operations

[CheckPickerUpper]

Summary

• resolve repository aliases to canonical keys across workspace validation, creation, membership changes, reverse-index lookup, and repo removal
• normalize newly added workspace members while preserving legacy alias references
• add regression coverage for alias-backed workspace references and removal

Closes #8

Verification

• cargo test --all-targets

[github-actions]

Visual recap — skipped

The visual recap job did not run for this pull request. This is informational only and does not block the PR.

Recap skipped for 131d204: VISUAL_RECAP_API_KEY not configured (openai-compatible backend).