Safer workflow instance updates

Executor updates only if the workflow instance is (still) assigned to it, will help detecting any future bugs if two executors execute the same instance concurrently.
External updates will only be allowed to change the state and nextActivation and only if the workflow is not currently running. Rest api will return 409 conflict if the update failed.