Creates a workflow automation rule (trigger + conditions + actions). Workflow activation uses a different payload shape than other modules' activate endpoints (e.g. Territory) — see Activate Workflow below for the type: ACTIVATE|DEACTIVATE body, not is_active. allowed_teams is required (non-empty) when workflow_access is TEAMS; allowed_users is required when workflow_access is USERS.