[flows-tinyflows] Catalog surface: serve workflow definitions, revisions and the CatalogStorage port (slice 2) #145

Serve the Catalog surface (crates/tinyflows-bus/src/catalog.rs, skeleton v1) from tinyflows-module, over the host's document port (CatalogStorage: DocGet/DocPut/DocDelete/DocQuery), backed by tinyflows-drivers::catalog::FlowCatalogDocuments.

Gaps found in the OpenHuman audit (host flows/store.rs, ops/definitions.rs, ops/updates.rs):

• PutWorkflow must distinguish create / update / duplicate, take expected_version, and return the FlowUpdateError conflict shape; report born-disabled / forced-approval flags.
• SetEnabled; revisions ListRevisions/GetRevision (history + rollback).
• WorkflowSummary adds enabled, require_approval, last_status, trigger kind, node count, updated_at; list reports skipped rows.
• Scope is the agent id bound by the host on the callback object.

Bump the Catalog contract version; wire tests for every type. Follow migrate-to-submodule (OpenHuman .claude/skills/): upstream PR → patch release → OpenHuman gitlink bump + registry digest re-pin. Design reference: docs/tinyflows-bus-design.md.

Done when: merged in tinyhumansai/tinyflows with wire tests for every new or changed contract type, released (patch), and the contract version bumped where a served shape changed. Gates: cargo fmt --all -- --check, cargo clippy --all-targets --all-features -- -D warnings, cargo test --all-features in tinyhumansai/tinyflows. OpenHuman adoption is a separate leaf of the epic.

Agent brief

• Files to consider (paths in tinyhumansai/tinyflows): crates/tinyflows-bus/src/catalog.rs, crates/tinyflows-module/src/, crates/tinyflows-drivers/src/catalog/
• Research: Host callers listed above; module-boundaries.json.
• Workflow: an implementing-an-epic step; follow migrate-to-submodule (upstream PR → patch release → OpenHuman gitlink bump + digest re-pin).
• Subagent: tdd-implementer.
• Dependencies: none.

Parent: tinyhumansai/openhuman#8055