/api/v1/environments/{id}/pause

Fast operation: state advances to paused within the request when possible. Exec and

file access are gated to running/degraded, so a paused environment refuses them.

Wake bumps the epoch (fencing) and invalidates epoch-scoped exec handles. Operator

face: principal sessions are denied 403 / 404 not_owned.