Api Workflow Runs Partial Update

PATCH handler with superadmin lock and field protection.

Checks:

1. Object lock (is_managed=True -> non-superadmins can't modify)
2. Field protection (non-superadmins can't modify specific fields)