Rework the webhook trigger flow (#4787) across the show panel and the
Choose/Configure wizard:
- Add a flat ghost button variant; move shadow out of the shared base so
 ghost buttons have no raised outline.
- Picker: drop the "Popular" badge, add a trailing chevron per row.
- Choose: show the trigger type as a chip with a "Change" button that opens
 the picker.
- Configure: replace the native Response Type select with a Listbox carrying
 per-option descriptions; collapse Authentication and Response Options by
 default; let users type any Success/Error status code (default 201); drop
 the header back arrow for a clickable breadcrumb; label the commit button
 "Finish".
- Show panel: use a secondary Edit button, drop the section separators, and
 summarise the response in one line with a link to the docs.
Authentication still uses the existing modal and is unchanged here.

Resting panel:
- Make Authentication and Response collapsible, with an at-a-glance
 auth count in the header ("none configured" / "N configured")
- Show the response type description and, when responding on
 completion, the default success/error statuses as read-only inputs
 with a note that job code can override them
- Replace prominent buttons with inline links ("Add authentication",
 "Configure default response status") that deep-link straight into
 the relevant Configure section
Edit wizard:
- Replace the multi-select credential dropdown with a row-per-method
 picker: "Add" appends a row, each row dedupes against the others,
 and a "Create a new authentication method" link opens the form
- Hide Response Options unless the webhook responds on completion
- Relay the create-auth modal's close event so Cancel works in the
 new flow

Bring the cron trigger onto the redesigned inspector flow, matching the
webhook pattern: a read-only show panel (humanized schedule + cron input
source) and a Choose -> Configure edit wizard over a local draft that
commits on Finish.
Configure reuses the CronFieldBuilder dropdown for the schedule, which
now auto-opens the raw cron expression field when Custom is selected and
shows a plain-English description of the expression beneath it.
Extract the shared TriggerTypeStep so the webhook and cron wizards no
longer duplicate the picker step wiring.

Replace the per-type WebhookEditWizard and CronEditWizard with a single
TriggerEditWizard that owns the draft and step machine and dispatches the
Choose and Configure steps by trigger type. The initial step is
`type ? 'choose' : 'picker'`, so supporting a nullable type later is a
one-line change.
Port kafka onto the new flow (KafkaConfigureStep + KafkaShowPanel,
generalized TriggerChooseStep) so the legacy TriggerForm — and its
now-orphaned WebhookAuthMethodModal — can be deleted. Kafka drops the
Enabled toggle and Run button to match the webhook and cron panels.
Guard useWebhookTrigger so it only requests trigger auth methods for
webhook triggers, avoiding needless channel calls for cron and kafka.

Fold TriggerTypeStep back into TriggerPicker and route all three trigger
types through the draft path, so picking a type holds until Finish — Cancel
now reverts a kafka type switch instead of committing it immediately. Commit
only the trigger fields that actually changed so a concurrent canvas edit to
an untouched field is no longer clobbered, and stop a type change from
silently re-enabling a disabled trigger. Resync the webhook auth-method rows
when the selection resolves asynchronously.
Extract shared EditFooter, ReadOnlyField, WizardFinishFooter and
useCanEditWorkflow used across the show panels and configure steps, and add a
trigger/ barrel for external consumers.
Share the trigger test harness across the inspector test files, add a
WebhookConfigureStep test, and collapse the repetitive cron and inspector
suites with test.each.

...ger-inspector-flow

@lmac-1 lmac-1 left a comment

- Move CronFieldBuilder and its test into trigger/; only the cron
 Configure step uses it
- Replace hardcoded hex in WebhookUrlField with Tailwind emerald classes
- Trim trigger/index.ts to the exports TriggerInspector actually consumes
- Extract the duplicated sameIdSet into trigger/idSet.ts
- Disable WebhookConfigureStep inputs when the workflow is read-only, to
 match the cron and kafka Configure steps
- Drop the speculative typeless-trigger path from TriggerInspector and the
 wizard's initial step
- Align Kafka Configure input borders with the webhook convention
- Lowercase "On a schedule" for casing consistency with "On webhook call"

Diff the draft against an open-time baseline snapshot rather than the
live trigger, so Finish writes only the fields the user actually changed.
Comparing against the live trigger treated a collaborator's concurrent
edit to an untouched field (e.g. toggling enabled on the canvas) as a
local edit and reverted it on Finish; isDirty had the same false positive.
Also commit the auth-method change before the local trigger write so a
failed channel request leaves nothing partially committed and reports
failure to keep the wizard open.

Fold WebhookChooseStep into TriggerChooseStep: the two were ~80%
identical, differing only in the webhook URL field and exit affordance
(footer Cancel vs. header back arrow). The merged step takes `type` plus
the webhook-only URL props, and chooses its exit shape from whether
`onBack` or `onCancel` is passed.
Replace the three near-identical wizard footers (WizardFinishFooter plus
the inline footers in the webhook Choose/Configure steps) with a single
WizardFooter, parameterized by primary label, optional Cancel, and an
optional validation error. This also removes the inconsistency where the
webhook Configure step hand-rolled its footer instead of sharing one.
No behavior change; the trigger inspector test suite is unchanged and
passes.

Drop comments that restated the adjacent code and metadata that no
longer aids the reader — Figma version references, issue-number tags,
and "ported from / former TriggerForm" historical notes. Keep per-prop
JSDoc, the functional doc blocks, and the rationale comments that
explain non-obvious behaviour (draft baseline and auth-load guards,
the server-side auth-modal relay, enabled-state preservation).

...ger-inspector-flow

@lmac-1 lmac-1 left a comment