Read back the manifest (owner only)
Owner read-back of the latest Release’s full manifest (including the runtime block), the data source for edit-then-republish; zero Release → 404 (draft self-inspection always goes through the /workspace endpoint; the two are never mixed — dual-source backfill relies on this boundary).
runtime is an internal construct (never in public payloads such as cards/detail), so this endpoint is owner-only (anyone else gets 404) — auth.secret is only an alias reference into runtime.env; credential plaintext lives in the secret store and is not leaked by read-back. status is injected as the current derived value; scope likewise from the current operational state (not the manifest’s original value — a publish wizard backfilling current visibility relies on it); the manifest no longer carries identity.version (the version is a Release attribute), so take the version from the detail injection / versions list.