Return accurate error messages

Return a "Bad request" error when the HTTP request headers are not
valid, for the trigger/workflow endpoint.  The response returned
previously was a "Forbidden" error, that in this case makes little
sense.

Return a BadScmPayload error for empty or wrong JSON payload in the
/trigger/workflow endpoint.