Expose draft/validate/publish/retire workflow APIs and template upload/list routes wired to workflowdef service with DBCatalog refresh on publish. Co-authored-by: Cursor <cursoragent@cursor.com>