feature: Implements Workflow integration

[edmore]

Changes Proposed

https://app.clickup.com/t/8689wwmpn

This creates an endpoint /workflows-integration which enables us to create a "workflow integration", which includes the following actions:

• creating an integration user within the organization
• creation of an API token and secret
• POST to /workflows endpoint in integration service to create the workflow

TODO:

• setup pennsieve.integration_service.host config

Checklist

• unit tests added and/or verified that tests pass
• I have considered any possible security implications of this change
• I have considered deployment issues.

[muftring]

@edmore - is this an internal-only endpoint?

[muftring]

Remind me, where is this endpoint being invoked? Do we need to check any additional permissions?

The endpoint body is a CreateWorkflowRequest from which only the datasetId is used in creating the ServiceToken. There is no check on the invoker's permission to access the dataset. Is this OK?

The CreateWorkflowRequest has no optional attributes, so this part would seem to overwrite either empty strings or any provided values:

body.copy(
    organizationIntId = secureContainer.organization.id,
    apiToken = tokenSecret._1.token,
    apiSecret = tokenSecret._2.plaintext
),

[muftring]

left comments on main discussion part of the PR