fix(workflows): harden workflow API auth routes#3559

Open

PlaneInABottle wants to merge 8 commits intosimstudioai:stagingfrom

PlaneInABottle:fix/workflow-api-auth-hardening

Commits on Mar 13, 2026

fix(workflows): tighten shared workflow access validation

PlaneInABottle
authored and
test
committed
fix(workflows): allow app auth on workflow lifecycle actions

PlaneInABottle
authored and
test
committed
fix(workflows): support app auth on deployment routes

PlaneInABottle
authored and
test
committed
fix: harden workflow API auth routes

authored and
test
committed
fix: harden workflow API auth follow-ups

authored and
test
committed
fix: align workflow audit actors for API keys

authored and
test
committed
fix: align workflow audit metadata helpers
test
committed
refactor: inline workflow access wrappers
test
committed