Publish a signature workflow

Promotes a draft signature workflow to a published one — once published, the workflow becomes selectable when configuring sign-off on experiments and its steps are locked from editing. Use this after the steps have been finalised via POST /{id}/steps. Drafts can still be edited; published workflows cannot.