refactor(workspace): pass workspace object instead of id to service methods

- Replace workspace_id parameter with Workspace object reference in all workspace service methods
- Remove redundant find_workspace_by_id calls that were duplicated in each method
- Update all method signatures across approval, audit, billing, branding, core, settings and stats modules
- Modify SQL queries to bind ws.id instead of separate workspace_id parameter
- Add Workspace import to all affected modules
- Adjust method calls in API handlers to pass workspace object instead of id
- Consolidate workspace retrieval logic to single location per operation flow

api/auth/get_2fa_status.rs

@@ -9,7 +9,7 @@ use crate::session::Session;
 #[utoipa::path(
     get,
     path = "/api/v1/auth/2fa/status",
-    tag = "Auth / 2FA",
+    tag = "Auth",
     operation_id = "authGetTwoFactorStatus",
     summary = "Get two-factor authentication status",
     description = "Read the current signed-in user's TOTP two-factor authentication status, including whether it is enabled, the authentication method, and whether backup codes are still available.",