Connected platforms

Prototype note

These connections are mocked. In production the OAuth code exchange happens server-side; access and refresh tokens are stored encrypted server-side and mirrored into the platform keystore only when the native engine needs an ingest URL. The app never handles platform passwords, and stream keys are minted per-session so they can be revoked without re-auth.