Returns one workflow app by ID with its triggers and create actions from
the currently published app version.

Malformed path IDs are rejected with 400 by the public API path-param
validator. Accessible apps without a published version return 404.

OAuth callers require the workflows:read scope (and matching workspace
permission). API key callers are authorized by organization membership.