WorkerSecurityGroups interface

Discovery result for a region: the selectable (tagged) groups plus the base worker SG(s) every worker always carries — included so a launch UI can treat ports the deployment substrate already opens as covered. label is empty on base groups.

Signature: