[One Workflow] Add managed workflow badge and read-only restrictions

[rosomri]

Summary

• Adds a managed badge to workflow list and detail views for managed workflows.
• Makes managed workflow YAML read-only while keeping the enable/disable toggle editable.
• Prevents managed workflows from being deleted through row actions or bulk actions, and explains the disabled row delete action with managed-specific hover text.
• Covers the new badge, read-only, listing, and delete behavior with focused workflows UI/server tests.

Test plan

• node scripts/jest src/platform/plugins/shared/workflows_management/public/widgets/workflow_yaml_editor/ui/workflow_yaml_editor.test.tsx src/platform/plugins/shared/workflows_management/public/pages/workflow_detail/ui/workflow_detail_header.test.tsx src/platform/plugins/shared/workflows_management/public/features/workflow_list/ui/workflow_list.test.tsx
• node scripts/jest src/platform/plugins/shared/workflows_management/server/services/workflow_search_service.test.ts
• node scripts/jest src/platform/plugins/shared/workflows_management/public/features/workflow_list/ui/workflow_list.authorization.test.tsx src/platform/plugins/shared/workflows_management/public/features/workflow_list/ui/use_workflow_bulk_actions.test.tsx
• node scripts/check_changes.ts

References

Closes elastic/security-team#17549

[kibanamachine]

💛 Build succeeded, but was flaky

• Buildkite Build
• Commit: 07f6450
• Build duration: 90 mins

Failed CI Steps

• Scout Lane #3 - stateful-classic / default

Metrics [docs]

Module Count

Fewer modules leads to a faster build time

id	before	after	diff
workflowsManagement	1892	1893	+1

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id	before	after	diff
workflowsManagement	2.5MB	2.5MB	+1.5KB

History

• 💚 Build #448898 succeeded 2f0f0ef
• 💛 Build #448063 was flaky 09a698d

cc @rosomri

[h88]

LGTM. Summary mentions default-including managed workflows + workflow_search_service changes but the PR seems UI-only? getWorkflows still defaults to managedFilter ?? 'unmanaged', so list badge/delete UX won’t show on the main list. Please either add the server/list changes or trim the PR description...