[api] Add missing show route to allow /api/variants/:id requests