/api/v1/environments/{id}/suspend

Freezes the environment and moves it to stopping; the carrier is reclaimed

asynchronously and the environment ends stopped. Filesystem fidelity across suspend

is the restore path's contract, not a process-preservation promise. Operator face:

principal sessions are denied 403 / 404 not_owned.