Context-based workspace firewall

[ryomaru0825]

 For machine-based public IP access—such as from service principals or managed identities—we need more flexible control, for example by temporarily relaxing or disabling the workspace firewall.