feat(k8s): add namespace-per-workspace support (RFC 0011 Phase 3) (#2656)