Redirect does not trigger Workflow access grant changes, especially on first state change

Redirecting to a another URL with the core or token action breaks Workflow access' grants settings, especially on first state change. As discussed in #298716: redirect to URL action troubles, drupal_goto exits and therefore prevents any further code execution. We need a better drupal_goto in core to solve the least, but workflow could solve the issue with its own access module by incorporating these two changes:

1. Execute the state transition hook of Workflow access (workflow_access_workflow) before any other actions get triggered by setting its weight lower than Workflow’s.
2. Execute any state transition hook implementation (hook_workflow) even on the very first state change, even if $node->workflow_scheduled is not set at all.