Returns details of a specific app. The nested interface collections (instance fields, program fields,
resources with their actions, and webhooks) are excluded by default and can be included with the
=1 query flags below.

Program fields, the connector class name, the OAuth client secret and the signed JWT configuration are
only returned when the requesting organization owns the app. For public apps owned by another
organization they are omitted; the OAuth client id, scopes and URLs remain available. The one
exception is the client secret of an interface whose browser consent URL requires it: the interface
has an oauth.authorizationUrl, uses the refresh_token grant and has
oauth.authorizationOptions.includeClientSecret set. Such a secret is part of a URL the end user
opens, so it is returned to every organization that can read the app.