[One workflow] Filter run modal using workflow triggers

[yngrdyn]

Relates to https://github.com/elastic/security-team/issues/16717.

Summary

The Run Workflow and Test Workflow modals no longer show every trigger tab on every workflow. Tabs are derived from triggers declared in the workflow definition. Manual and Historical are always shown when the workflow defines triggers. Initial tab selection and permission fallbacks are constrained to tabs that remain visible, so users are not left on a hidden tab after RAC or capability changes.

What changed

Tab visibility rules

Tab	Shown when
Alert	Workflow includes an alert trigger
Event	Workflow includes custom event-driven triggers (extension trigger types, e.g. cases.created)
Document	Workflow includes a manual trigger
Manual	Always
Historical	Always

When the definition is missing or has no triggers, all tabs are still shown (unchanged behavior for incomplete or legacy callers).

🎥 Demo

Screen.Recording.2026-05-31.at.23.27.27.mov

[kibanamachine]

💔 Build Failed

• Buildkite Build
• Commit: dd8e65e
• Build duration: 55 mins

Failed CI Steps

• Scout Lane #16 - stateful-classic / workflows_ui
• Scout Lane #16 - stateful-classic / workflows_ui

Test Failures

• [job] [logs] Scout Lane #16 - stateful-classic / workflows_ui / local-stateful-classic - Workflow execution - Test runs - should show the test execute modal Event tab and trigger events table
• [job] [logs] Scout Lane #16 - stateful-classic / workflows_ui / local-stateful-classic - Workflow execution - Test runs - should show the test execute modal Event tab and trigger events table

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id	before	after	diff
workflowsManagement	2.5MB	2.5MB	+463.0B

History

cc @yngrdyn