Returns a flat catalog of every selectable workflow step option available to
the authenticated organization: published app creates, searches, and triggers,
plus built-in actions, triggers, and flow controls.

Two-phase discovery (recommended for agents)

1. Summary (default) — browse/search with detail=summary (or omit
   detail). Each option includes identity, placement, a create-ready
   step_template, plus lightweight input_field_names and
   has_dynamic_fields (so you know whether to call input-options) —
   but not full input/output schemas, samples, or logo maps.
2. Full — call again with detail=full and id=<option_id> (or
   ids=id1,id2,..., max 10) to load schemas for those options before
   configuring inputs.

detail=full without id or ids returns 422. Dynamic dropdown
values are never included — use the workflow-apps input-options endpoint.
Prefer one detail=full&ids=... call over repeated single-id lookups.

Access matches the workflow-apps catalog: org-owned and global published apps
only; hidden / unpublished operations are excluded.

Optional workflow_id and parent_step_id filter options to those valid at
that graph position (org-scoped; unknown IDs return 404). After picking an
option, call createWorkflowStep with the template, then
updateWorkflowStep / testWorkflowStep as needed.

Prefer combining app_id + key (+ optional placement) when you already
know the app and perform key — that returns the single matching action.
search remains a looser substring match and is unchanged when used alone.

OAuth callers require the workflows:read scope (and matching workspace
permission). API key callers are authorized by organization membership.