The attachment’s metadata and a link to fetch it, valid for 900 seconds.
A link and not the bytes, for the reason GET /runs/{run_id}/artifacts/{attachment_id}
is: the caller fetches the object from the bucket either way. An id from another workspace
is a 404, the same as one that does not exist.