Forcing genuine workflow into a content system produces something fragile that nobody can safely change. Running it alongside, with a clean boundary and its own admin, produces something maintainable.
Integrations were treated as the risky part. Every external service is a dependency that will change underneath you, so each sits behind a boundary we control rather than being called from wherever was convenient.