DL-587

A tenant admin binds a GitHub account through a connect flow separate from installing: a browser-bound OAuth web flow with PKCE lists the user’s installations, and only accounts the user controls (the user’s own account, or an org where the user is an active admin) may be confirmed; the user token is revoked and never stored, and the socket door alone offers a proof-free operator bind

Status: Active (designer, 2026-10-19)