AgentGuard workflows

Public tree verification

For a workflow created against the authenticated AgentGuard workflow API via api_base_url, share /verify/workflow/{id}. The route returns that hosted receipt chain for replay and parent-link checks. Local workflows are not uploaded or published automatically.