Resolve workflow requirements from one source of truth

When a workflow stores an immutable per-flow requirements snapshot but also has a group-level verifier, every detector, reconciler, and completion check must resolve requirements from the same source. Otherwise one component can correctly identify the final configured step while another silently evaluates current or default group configuration and refuses to complete the flow.

This applies when configuration is snapshotted at creation but later state is recomputed from mutable higher-level settings. A synthetic test must either attach a real dedicated configuration object that the verifier actually consumes or first fix the verifier to honor the snapshot. Editing only the snapshot is not a valid end-to-end fixture when a downstream reconciler ignores it.