Document native client OAuth and Mail API behavior

[bermanto]

Document how offline OAuth clients stay connected after browser expiry or sign-out, how password reset and connection revocation stop access, and how clients manage signatures with the separate signatures:manage permission.

Also define the draft input/snapshot schema split, deleted-signature behavior, and opt-in v1 label membership, including page links. Keep consent and Connections access text consistent with the API.

Companion implementation: HQBase/hqbase#117. This PR builds on #49 and targets docs/audit-reliability. Review that PR first, then retarget this PR to main after it merges. Publish these documentation changes with the implementation.

Validation: pnpm check passed, including tests, documentation integrity, Astro checks/build, and deployment dry run.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}