feat(api): workflow outline, workspace schedules list, clearer v2 errors, and catalog value types - #9905

Summary

• v2 errors include an optional error.traceId (same id as the x-request-id header), and validation messages name where the problem is, e.g. body.limit: .... v1 and internal error output is unchanged. Named traceId because v2 already uses requestId for a client-supplied operation id.
• The read-only API key 403 now ends with "Use a full-access API key." details.code is unchanged.
• Block catalog fields expose valueType from the block's declared inputs, next to the editor type. Shared projection, so Copilot sees the same thing. Absent when it can't be derived; no generated examples.
• New GET /api/v2/workflows/{id}/outline: a compact, read-only view of the draft (same authorization as /state, output is a subset of it). Documented as never to be PUT back to /state.
• New GET /api/v2/schedules?workspaceId=: every live schedule in a workspace, cursor-paged, sharing the per-workflow list's row predicate.
• Schedule cron/timezone stay editable only by editing the schedule block and deploying: deploys recompute the schedule row from the deployed block, and rescheduling reads the deployed block's timezone, so a live-row edit would be half-applied and reverted. The field descriptions and CLI docs now say this.

Test plan

• Generators current: openapi, mcp-operations, cli-api, cli-docs, v2-route-table; check:api-validation:strict, check-openapi-specs
• Targeted vitest: list-pagination, query-declaration, cross-cutting, catalog projection, MCP catalog/dispatch, v2 builders/validation, execute/logs/chat-deployment/knowledge/uploads routes, openapi documents, sim-cli contract/client
• valueType test fails with the join removed
• CI gate (type-check, audits, full suite)