bridge: Add fsread1, fswrite1, and fswatch1 payload types.

I think it would make sense to have this set to 'not-authorized' for EPERM and 'internal-error' for all other unexpected errors.