#567 [MEDIUM] Missing workflow_id in permission check logs

Permission check audit logs in api/middleware/rbac.py don't include workflow_id when checking workflow-specific permissions. This makes debugging permission issues harder. Fix: Add workflow_id to log context when available.