Re-run authorization (oauth2) or re-save credentials (api-key/custom) for an existing open_connector connection — for when its upstream token expired/was revoked or the api key rotated. The provider row, grant key, and relay binding are untouched; the service + connection profile are re-derived from the stored binding markers. For oauth2 an authorizationUrl is returned to open in a popup.