docs(api_workflow_node_execution_repository): Add notice about datat …

…isolation

Signed-off-by: -LAN- <laipz8200@outlook.com>

api/repositories/api_workflow_node_execution_repository.py

@@ -95,6 +95,10 @@ def get_execution_by_id(
         This method retrieves a specific execution by its unique identifier.
         Tenant filtering is optional for cases where the execution ID is globally unique.
 
+        When `tenant_id` is None, it's the caller's responsibility to ensure proper data isolation between tenants.
+        If the `execution_id` comes from untrusted sources (e.g., retrieved from an API request), the caller should 
+        set `tenant_id` to prevent horizontal privilege escalation.
+
         Args:
             execution_id: The execution identifier
             tenant_id: Optional tenant identifier for additional filtering