feat(e2e): workflow bridge mutations publish real relay events (Fixes #172)

[oscarlehuu]

Summary

Gives the four e2e bridge workflow commands real relay branches under D-042, fixing the mock-boundary trap recorded in audit 0011 during #144 / PR #168.

Confirmed against Rust (desktop/src-tauri/src/commands/workflows.rs + events.rs):

Command	Kind	Tags / content	Return (relay)
create_workflow	30620	d + h, YAML content	flattened WorkflowSaveWire (+ optional webhook_secret from response:)
update_workflow	30620	same d + prior h	flattened wire, no webhook secret
delete_workflow	5	a=30620:owner:id	void
trigger_workflow	46020	d	{ event_id } (Rust shape)

No kind 30625 exists in Rust or the repo (issue title hypothesis only). Mock mode is unchanged for smoke.

Related issue

Fixes #172

Testing

• Aligned event shapes with Rust workflows.rs / events::build_workflow_* (kinds/tags above).
• pnpm --filter buzz typecheck — pass
• pnpm --filter buzz check — pass (pre-existing optional-chain warning in archive path only)
• CI=true pnpm --filter buzz build:e2e — pass
• Integration: extended desktop/tests/e2e/bridge-relay-mutations.spec.ts with create → update → trigger → delete assertions against POST /query. Local Docker/relay stack was not available in this cloud agent VM, so the integration project was not executed here. Covered by advisory Desktop E2E Integration when CI runs (not part of required NuncioCrew Gate).
• Docs: moved workflow commands from misclassified local-only → relay-aware in docs/crew/verification/0011-e2e-bridge-relay-mutation-audit.md; updated docs/crew/STATE.md pointer.

Notes

• Relay trigger return is { event_id } to match Rust; mock mode still returns the smoke-oriented { run_id, workflow_id, status } shape.
• Does not expand into hold epics or unrelated bridge work.