feat: support agent backend workflows and safer publish runs