fix: harden authenticated workflows

[VolodymyrLinuxovich]

Summary

• limit Google sign-in to identity scopes and connect workspace services explicitly
• scope imported-data deletion to the disconnected integration
• prevent invalid outreach status regressions and duplicate-send paths
• validate pitch-deck, reply, and calendar resource ownership before writes
• resolve tracked profile links from stored data and allow only HTTP(S) destinations
• claim sync jobs atomically to prevent concurrent duplicate processing
• make Vitest aliases checkout-relative and add focused regression coverage

Validation

• npm test — 70 tests passed
• npm run typecheck — passed
• npm run lint — passed
• npm run build — passed

Follow-ups

• Make public project URLs owner-scoped or globally unique.
• Upgrade the locked dependency graph to clear the remaining production audit advisories.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
largevcmodel	Ready	Preview	Aug 9, 2026 9:38am