appstore-workflow-runner

# App Store Workflow Runner Use `asc workflow` for lane-style repo-local automation. Workflows run trusted shell commands, stream step output to stderr, and keep stdout machine-readable JSON. ## Commands Verify flags first: ```bash asc workflow --help asc workflow validate --help asc workflow list --help asc workflow run --help ``` Run flow: ```bash asc workflow validate asc workflow list asc workflow list --all asc workflow run --dry-run beta BUILD_ID:123 GROUP_ID:abc asc workflow run beta BUILD_ID:123 GROUP_ID:abc asc workflow run release --resume "release-20260312T120000Z-deadbeef" ``` Do not pass new `KEY:VALUE` params with `--resume`; saved workflow, params, and outputs are reused. ## File Contract - Default: `.asc/workflow.json`; override with `--file`. - JSONC comments supported. - Top-level hooks: `before_all`, `after_all`, `error`. - Workflow keys: `description`, `private`, `env`, `steps`. - Step forms: string shorthand, `run`, `workflow`, `name`, `if`, `with`, `outputs`. - Runtime params accept `KEY:VALUE` and `KEY=VALUE`; repeated keys are last-write-wins. - Env precedence: `definition.env < workflow.env < CLI params`; for sub-workflows: `sub env < caller env/params < step with`. - Conditional truthy values: `1`, `true`, `yes`, `y`, `on`. Outputs: - `run` steps that declare `outputs` must emit JSON stdout, have unique reference-safe `name`, and should call `asc ... --output json`. - Reference as `${steps.step_name.OUTPUT_NAME}`. - Do not map secrets into...