#1013 Tenant users can list, pause, drain, resize and delete shared platform workers (/api/v1/workers*)

EARS: The worker list and worker control endpoints shall be available only to platform admins (require_platform_permission). Tenant users shall get 403. EVIDENCE (live, 2026-10-20 02:51Z, tenant test, https://highway.rodmena.co.uk): GET /api/v1/workers -> 200 with 13 workers on highway_activity/highway_default/highway_internal (worker ids, machine_id, tags). POST /api/v1/workers/t1005-no-such-worker/pause -> 404 WORKER_NOT_FOUND, so a tenant passes RBAC and reaches the handler (no real worker was touched). STATIC: api/blueprints/v1/workers_control.py PUT capacity, pause, resume, drain, DELETE, cleanup use only require_permission('manage_workflows'), a tenant permission, and call pause_worker()/... on the shared worker_registry. A tenant admin can therefore pause or drain every platform worker (cross-tenant outage). Raised from the #978 question during #1005.