feat(N1): Scope-Registry via Contract — workspace_scopes() Deklarationen + /scope-definitions Endpoint (#365)

- workspace_scopes() Contract-Hook (document_placeholders-Muster): Plugins deklarieren Scope-Dimensionen inkl. Wertequellen
- Deklarationen: contacts (Ordner/Typen/Saved-View), dms (Ordner/Datei-Typen), mail (Postfächer), calendar (Kalender/Standard-Ansicht)
- Pydantic fail-closed (schemas/workspace.py): ScopeOption, ScopeValueSource (nur interne /api/v1-Pfade, SSRF-sicher), WorkspaceScopeDimension, WorkspaceModuleScopes
- Aggregator workspace_scope_service.py: discovered-Plugins, ARCH-014-safe, Crash-sicher, ungültige Deklarationen verworfen
- GET /api/v1/workspaces/scope-definitions (workspaces:configure_modules) vor /{workspace_id} registriert
- Security-Invariante: Scope = reine UND-Einschränkung (Workspace ∧ RLS ∧ ABAC ∧ Permissions)
- Tests: 18/18 neu (TDD rot→grün), Regression 17/17, Checker 0 Verstöße, Ruff clean
- Doku: api-documentation.md Workspaces-Sektion, PROGRESS.md Phase N1

app/plugins/builtins/contacts/contracts.py

@@ -349,6 +349,53 @@ class ContactsContract:
             data[key] = value if value is not None else ""
         return data
 
+    # ─── Workspace Scopes contribution (Phase N1, #359 pattern) ───
+    # Declares the scope dimensions the contacts module supports; the N2
+    # workspace editor renders its filter UI from these definitions. Scope
+    # VALUES live per workspace in workspace_modules.config (JSONB).
+
+    @staticmethod
+    def workspace_scopes() -> list[dict]:
+        """Scope-Dimensionen des contacts-Moduls für den Workspace-Editor."""
+        return [
+            {
+                "module_key": "contacts",
+                "dimensions": [
+                    {
+                        "key": "folder_ids",
+                        "label": "Kontakt-Ordner",
+                        "control": "multiselect",
+                        "value_source": {
+                            "endpoint": "/api/v1/contact-folders",
+                            "items_path": "items",
+                            "value_key": "id",
+                            "label_key": "name",
+                        },
+                    },
+                    {
+                        "key": "contact_types",
+                        "label": "Kontakt-Typen",
+                        "control": "multiselect",
+                        "options": [
+                            {"value": "company", "label": "Firmen"},
+                            {"value": "person", "label": "Personen"},
+                        ],
+                    },
+                    {
+                        "key": "default_saved_view_id",
+                        "label": "Standard-Ansicht",
+                        "control": "select",
+                        "value_source": {
+                            "endpoint": "/api/v1/saved-views?entity_type=contact",
+                            "items_path": "",
+                            "value_key": "id",
+                            "label_key": "name",
+                        },
+                    },
+                ],
+            }
+        ]
+
     @classmethod
     def get_function(cls, name: str):
         """Return a callable exposed by this contract, or None if absent."""