ResolveWorkingDir now prefers the on-disk layout (root/dir, else
root/sharedDir/dir) so workflows compiled with or without the
shared-dir prefix stop spawning failing jobs against a missing cwd.
TriggerScheduler defers an auto-trigger once a tenant has >=
Workflow:TriggerMaxInFlight (default 5) in-flight runs, so a slow
worker no longer stacks a never-draining backlog (the root of the
run-timeout overload).
