fix: reject non-object workflow caches

[marcelsafin]

Summary

• treat non-object workflow and step cache metadata as invalid
• refetch when a cached workflow catalog is not a JSON object
• reject non-object stale cache fallbacks instead of returning unusable data

Testing

• uvx ruff@0.15.0 check src tests
• .venv/bin/python -m pytest -q tests/test_workflows.py (821 passed)
• .venv/bin/python -m pytest -q (6011 passed, 173 skipped)

AI disclosure

GitHub Copilot helped identify edge cases and review the implementation. I reproduced the failures and validated the final change with targeted and full test suites.

[Copilot]

Pull request overview

Hardens workflow catalog caching against non-object JSON values.

Changes:

• Rejects non-object workflow and step cache metadata.
• Refetches invalid workflow caches and rejects invalid stale fallbacks.
• Adds regression tests for metadata and fresh-cache behavior.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
src/specify_cli/workflows/catalog.py	Validates cached metadata and catalog payload types.
tests/test_workflows.py	Tests invalid metadata and workflow-cache refetching.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[marcelsafin]

@copilot review

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.