Resolve workspace document URIs from the tree, not the caller's DID
The workspace editor route synthesized documentUri(currentUserDid, docRkey)
to figure out what to edit. That's fine for the cabinet — cabinet docs are
always authored by the current user — but wrong for workspaces, where each
member uploads to their own repo. Opening a document a peer uploaded
produced an at:// pointing at the wrong authority, then failed to decrypt
(or worse, matched nothing and silently 404'd).
Resolve the full URI from the tree snapshot instead. findDocumentUriByRkey
scans every directory for a document entry whose rkey matches the URL
parameter. Unique match → use it. Zero matches or multiple matches (the
latter is vanishingly unlikely with TID-based rkeys but theoretically
possible across repos) → show "Document not found in this workspace"
rather than guess.
The cabinet route is unchanged — single author, no ambiguity.