Partially updates one step on the workflow draft (input mapping, credential,
action config via data, plus optional name / metadata / samples).

Implemented as a draft sync of the full step list with the patched step
merged in. If no draft exists yet, sync creates one from the published
version — step IDs may remap; the response returns the post-sync step.

OAuth callers require the workflows:update scope.