Add missing workspaces API spec

What does this MR do and why?

Adds a missing unit test (found while fixing rubocop failures)

There is already adequate coverage of the logic itself at the lower level, this just adds coverage for the API plumbing and KAS authorization.

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.