Add workflow for viewing a variant set and adding assessments

This does not enforce a user permission. Is this intentional? Anyone could supply a primary key and see the variant set even if they aren't the user.