fix(api): prevent caching authenticated workflow variables

[waleedlatif1]

Summary

• Return workflow variables with Cache-Control: private, no-store so authenticated responses cannot be stored or reused by HTTP caches.
• Remove the obsolete cache lifetime and ETag calculation.

Type of Change

• Bug fix

Testing

• bun run lint
• bun run check:audits (51 passed)
• bun run apps/sim/scripts/check-block-registry.ts origin/staging
• bun run docs-manifest:check
• bun run --cwd apps/sim type-check
• bun run --cwd apps/sim test 'app/api/workflows/[id]/variables/route.test.ts' (2 passed)

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 26, 2026 9:08pm UTC

[cubic-dev-ai]

No issues found across 1 file

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

[Critical risk] Changes cache headers on authenticated API endpoint.

The PR appears safe to merge; the response cache policy survives the app’s route handling, and no caller dependency on the removed headers was found.

Summary

The workflow variables GET response now uses Cache-Control: private, no-store and no longer emits a cache lifetime or ETag. No new actionable issue was identified.

_{Reviews (2) · Last reviewed commit: "fix(api): prevent caching authenticated ..."}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 1 file

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}