Set surface visibility

Sets an app surface’s visibility to either private or public, controlling whether its bare URL works for anyone. Scoped to the caller’s workspace, and the caller must be able to access the surface’s backing conversation. Rejects values other than private or public with 400. Returns the surface id, the resulting visibility, and the underlying auth mode. Returns 404 if the surface is not found or is in a terminal state.