fix(workspaces): validate roots before refreshing sessions