The Workflow.finished field should not be editable through the API

The Ponos workflow completion date, Workflow.finished, is exposed as a read-write field on RetrieveWorkflow, PartialUpdateWorkflow and UpdateWorkflow. It should instead be read-only; the backend is responsible for automatically setting finished when all tasks are updated to a final state, and API users are not supposed to be able to edit it.