Requests cancellation for a generation owned by the authenticated workspace. Completed, failed, or already-cancelled generations cannot be cancelled. The job is fenced from new provider submissions immediately. Already-authorized provider work is cancelled when the provider supports it and otherwise reconciled asynchronously to terminal status.