fix(workflows,connectors): close pre-merge audit findings

Recover subblock values orphaned by the id renames in this release, and
stop truncated knowledge-base listings from reporting themselves complete.

- Add operation-scoped subblock id migrations so a saved workflow's stored
  value survives a rename. Cloudflare create/update DNS record, ServiceNow
  read record, and Okta deactivate/delete previously lost their stored value:
  the create path substituted a seeded default (an A record where the user
  chose CNAME, and unproxied where they chose proxied), and the update path
  silently no-opped while reporting success. A migration is used rather than
  a legacy-id fallback so no subblock id carries two value spaces at runtime.
- Webflow, Zendesk: a listing that stops for a reason the connector cannot
  rule out now reports as capped instead of exhausted. A malformed envelope,
  an unfollowable continuation link, or an absent collection list previously
  read as a complete listing and let deletion reconciliation hard-delete
  every document past the truncation point.
- Sentry: pin the listing window in the request rather than inheriting the
  server default, so the range cannot silently narrow into hard deletes.
- Fork sync: a parent re-pick no longer writes a blank over a hidden optional
  dependent's stored target value, and a required field stays on screen once
  it is filled. Add hook-level coverage for the submitted payload.
- Fork file copy: a file whose name is already taken in a reused target folder
  is de-duplicated instead of dropped.
- Delete an orphaned Shopify OAuth route that built a credential from unsigned
  cookies. It had no writer, no caller, and no inbound link.
- Tailwind: drop two content globs that scanned 5.4k files to emit one unused
  rule, keeping the ones that fix brand tile icon color.
- Correct the API route-count baseline, add an Evernote docs redirect, align
  library copy with the language rules, and fix a stale turbo filter.

Author: waleedlatif1

.agents/skills/migrate-application-operation/SKILL.md

@@ -317,7 +317,7 @@ Run at minimum:
 ```bash
 bunx vitest run <focused test files>
 bunx biome check <changed source and test files>
-bunx turbo run type-check --filter=sim --filter=@sim/auth
+bunx turbo run type-check --filter=@sim/app --filter=@sim/auth
 bun run check:api-validation:strict
 git diff --check
 ```

apps/docs/lib/redirects.ts

@@ -81,6 +81,10 @@ export const DOCS_REDIRECTS: DocsRedirect[] = [
     destination: '/agents/custom-tools',
     permanent: true,
   },
+  // evernote integration page removed; without this the /tools/:slug rule below
+  // would permanently redirect /tools/evernote into a 404.
+  { source: '/tools/evernote', destination: '/integrations', permanent: true },
+  { source: '/integrations/evernote', destination: '/integrations', permanent: true },
   { source: '/tools', destination: '/integrations', permanent: true },
   { source: '/tools/:slug', destination: '/integrations/:slug', permanent: true },
   // Old blocks/triggers index pages were folded into the workflows overview.