Retrieve a workflow run

Returns one workflow run by globally unique run id, including the full debug payload: the captured triggerPayload, the run data (per-step results), the persisted logs trace, and retry metadata (attempt, nextAttemptAt, lastErrorAt). Scope 1 deliberately exposes these as JSON dumps so users and agents can understand exactly what happened in a run.

Poll this endpoint after POST /api/v3/workflows/{workflowId}/test: runs execute asynchronously and transition queued → running → completed/failed/canceled.

Unknown or inaccessible run ids return 403 rather than 404 to avoid leaking cross-workspace resource existence.