Get a single integration instance by its GUID. Admin/TC (and team credentials) are scoped to the authenticated team — access is denied if the instance belongs to a different team. Regular agents may only fetch an active instance on their own team that belongs to an integration supporting user-level deploy.