Add the Tailscale catalog entry (rest_api, api_key) that stores an OAuth
client in the vault, a server-side API client for token exchange, device
listing, and auth key mint/delete, and a health check that proves the
client scopes and tag ownership with one ephemeral test key. Store a
redacted summary on the connection, map provider failures to actionable
codes without echoing provider bodies, refuse credential export, and add
brand assets, review registry entry, docs, and fixture tests.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
