feat: sync deployed v1.0.0-rc.38-custom.42

Sync production source including routing, billing, Astra detection and public uptime. Update custom build instructions and license packaging.

oauth/provider.go

@@ -40,3 +40,10 @@ type Provider interface {
 	// (e.g. the user_oauth_bindings table) return an empty string.
 	ProviderUserIDColumn() string
 }
+
+// VerifiedEmailProvider is implemented by providers that can list the email
+// addresses they have confirmed for the signed-in account. The login flow uses
+// it to match a provider account against an existing account's email.
+type VerifiedEmailProvider interface {
+	GetVerifiedEmails(ctx context.Context, token *OAuthToken) ([]string, error)
+}