fix(apps): send workflowId not path from CLI; wire sandboxRoot and systemPromptPath in server; update prompts and fixtures

examples/workflows/healthcheck.toml

@@ -0,0 +1,31 @@
+id = "healthcheck"
+start = "write_script"
+
+[[stages]]
+id = "write_script"
+prompt = "prompts/healthcheck_write.md"
+produces = [{ name = "healthcheck_script", kind = "file_written" }]
+allowed_tools = ["file_write"]
+token_budget = 4096
+max_retries = 2
+
+[[stages]]
+id = "execute_script"
+prompt = "prompts/healthcheck_execute.md"
+needs = ["healthcheck_script"]
+produces = [{ name = "healthcheck_result", kind = "process_result" }]
+allowed_tools = ["ShellTool"]
+token_budget = 2048
+
+[[transitions]]
+id = "write-to-execute"
+from = "write_script"
+to = "execute_script"
+condition_type = "artifact_validated"
+condition_artifact_id = "healthcheck_script"
+
+[[transitions]]
+id = "execute-to-done"
+from = "execute_script"
+to = "done"
+condition_type = "always_true"