Function router 

pub fn router<S: WorkflowStore>(state: Arc<WorkflowCtx<S>>) -> Router

Build the workflow HTTP API router. Auth is enforced at the engine layer (via [assay_auth::gate] in assay_engine::server); this router carries no gate of its own. health, version, openapi.json, and docs are always public so probes can reach them without a bearer token.