Read/write workspace notes and fetch remote snippets with explicit high-risk grants.
Demonstrates high-risk plugin capabilities with explicit grants.