Workspace administrators need the ability to gate Co-scientist access to specific users rather than enabling it for everyone in a workspace.

This is critical for controlling token/usage consumption and ensuring only authorized users (e.g., pipeline developers) can invoke AI-assisted features.

The UI should provide a dashboard or settings page to manage which users have Co-scientist access and optionally set per-user usage limits.