Making /workspace needs permission to write files

files:mkdir on / or /workspace now needs a key that may write files, as on any other path, and a key that may only read is refused. If the path exists but is not a folder, it answers 409 not_a_directory instead of success. See Files.