FortiVault Workflow Engine

API endpoints:

• POST /api/workflows/refund-request — submit a refund workflow
• GET /api/workflows/:id — fetch status, steps, and audit trail
• POST /api/workflows/:id/approve — approve a human-gated step
• POST /api/workflows/run — process due steps (called by CronJob)