feat(workspace): sealed-area names are confidential by default

The switcher listed sealed areas by name ('lbs', 'stromnetz') on
any glance or screenshot — but the names themselves often carry
client/mandate identity (usertest security finding). The sealed
section now renders one aggregated row ('2 sealed areas') with a
deliberate 'Show names' reveal per menu opening; selection still
pops the regular s:<slug> value. Settings -> Security gains 'list
sealed areas with their names right away' (WorkspacePrefs,
SidebarPrefs pattern, default off).

The aggregate row wraps to two lines — popup menus cap their
width and action texts must never be truncated (the first cut
showed '1 abgeschotte…' in the proof shot). Guard: switcher tests
cover aggregated-until-reveal and the Settings toggle; the old
direct-listing test now asserts the reveal contract. DE+EN.

Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>

lib/main.dart

@@ -15,6 +15,7 @@ import 'data/chain_log.dart';
 import 'data/error_presentation.dart';
 import 'data/hub.dart';
 import 'data/sidebar_prefs.dart';
+import 'data/workspace_prefs.dart';
 import 'data/workspace.dart';
 import 'data/system_actions.dart';
 import 'data/theme_plugin.dart';
@@ -78,6 +79,7 @@ Future<void> main() async {
   final themePlugin = await _restoreOr(null, loadActiveThemePlugin);
   await _restoreOr(null, () async {
     await SidebarPrefs.load();
+    await WorkspacePrefs.load();
     return null;
   });
   runApp(