Branched onboarding

Import validation

Validate an application-owned export without importing secrets.

Save and exit
Import branch
Import validation

Import workspace configuration

File parsing, size limits, signatures, validation, and imported policy remain application code.

Secrets are never imported
The export may describe integrations, but credentials must be configured again.