Bugfix: Add workflow scope to Role scopes

This caused two P1s on 2nd day of testing s37.5. The issue was when editing scopes, the user could accidentaly change the scope to Private Program because there was no other option in the Select box:
![screen shot 2014-09-24 at 16 51 48](https://cloud.githubusercontent.com/assets/513444/4390097/62dd7616-43fa-11e4-8368-a9ed9d245596.png)

The fix adds Workflow to the list:
![screen shot 2014-09-24 at 16 54 48](https://cloud.githubusercontent.com/assets/513444/4390142/c6125b2a-43fa-11e4-9cce-b3cf751f3ce0.png)

But the user can still pick Private Program and break something. **We need to discuss how to better handle Roles**.