Step settings per profile

On the workflow canvas, each agent and action step shows a small chip with its setting; click the step to change it. Branches are already per profile, so a step inside a profile's branch has one choice. A step before the branches runs for every profile, so it has one choice per profile. A common pattern:

• High-Touch Enterprise — Needs approval, or Just notify, for anything a customer would see.
• Usage-Led — Needs approval for risky actions, Do automatically for routine ones.
• Self-Serve / PLG — Do automatically almost everywhere (emails: Draft in CSM mailbox, or Send automatically once you trust the workflow and turn Auto-send on).

There are no tier dropdowns on the Agents page any more: "What happens to an agent's output is set on each workflow step." Workflows created before this change kept exactly what they did: plain workflow actions became Needs approval (they always queued), Health Analyst and Renewal Brief notes became Do automatically, and every other step got the setting its agent had for that profile.

Task Closer runs outside workflows and has one workspace switch on its row on the Agents page: High-Touch closures need approval (on by default). Other closures are made directly. Every closure needs evidence; without it, the task gets a note instead.