[comp] Production Deploy

[github-actions]

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.

---

Summary by cubic

Hardened OAuth refresh and token storage (focused on Google) to prevent losing refresh tokens and to return clear, provider-specific errors. Improves integration reliability and avoids unnecessary reconnects; adds tests.

• Bug Fixes
  • Preserve existing refresh token on reconnect for gcp and google-workspace when Google omits refresh_token.
  • Skip sending scope during Google token refresh; added host-aware logic to control refresh scope behavior.
  • Distinguish retryable vs terminal refresh failures; set connection to error with parsed provider message (e.g., invalid_rapt) or return 503 for temporary issues.
  • Controllers and cloud scans surface stored connection error messages; task runner respects errorMessage without overwriting.
  • Added unit tests for connections controller and credential vault (Google refresh and token storage).

^{Written for commit 92dcfbd. Summary will update on new commits.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
comp-framework-editor (staging)	Ready	Preview, Comment	Jun 19, 2026 5:08pm

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
app (staging)	Skipped		Jun 19, 2026 5:08pm
portal (staging)	Skipped		Jun 19, 2026 5:08pm

[cubic-dev-ai]

No issues found across 9 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}

[claudfuen]

🎉 This PR is included in version 3.86.5 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀