feat: add upstash-api-platform connector

[andrei-hasna]

Summary

• Add @hasna/connect-upstash-api-platform for the real Upstash Developer API (https://api.upstash.com/v2) with HTTP Basic auth (email + management API key).
• Cover platform management endpoints: teams (list/create/members), vector indices (list/get/create/delete), audit logs, and a raw request escape hatch.
• Register upstash-api-platform in Developer Tools; scope excludes Redis/Kafka CRUD reserved for the sibling upstash slug.

Test plan

• cd connectors/upstash-api-platform && bun install && bun run typecheck && bun run build && bun test
• bun run typecheck (repo root)
• bun test src/lib/registry.test.ts
• bun test src/lib/installer.test.ts
• rg scan: no api.upstashapiplatform.com, beepmedia, hasnaxyz, browser-use, or hardcoded secrets
• Full bun test suite (186 CLI subprocess failures in this worktree env — pre-existing empty stdout from spawned CLI; unrelated to connector diff)

[andrei-hasna]

Worker update for task dc463b0d-01ed-4fa3-b5de-7c16287d6482.

Pushed 2b31af60b42c5b5784a22e3e530500fe58a28d0f to this PR after adversarial review found security blockers. Fixes included:

• restrict authenticated base URLs to https://api.upstash.com
• redact token/read_only_token and other secret-like output by default, with --show-secrets opt-in
• store profiles with 0700/0600 modes and validate profile names
• correct package repository metadata and make the .env example scanner-safe

Validation:

• GitHub CI build passed on 2b31af60
• full local bun test with writable HOME passed: 1485 pass, 0 fail
• root and connector typecheck/build passed
• staged Todos redaction scan and targeted secret/internal/browser-automation scans passed

Not merged by this worker: authenticated GitHub user is PR author andrei-hasna, the PR has no non-author GitHub review, and requesting kriptoburak failed because GitHub reports that user is not a collaborator on hasna/connectors. Follow-up reviewer-gate todo: d9daa157.

[andrei-hasna]

Verifier update for task dc463b0d-01ed-4fa3-b5de-7c16287d6482.

Validation still looks good for the Upstash connector implementation and hardening on head 2b31af6:

• GitHub CI build is passing.
• Local connector tests, connector typecheck/build, root typecheck/build, registry/installer tests, and full bun test passed (1485 pass, 0 fail).
• Static checks found no browser automation dependency, internal refs, or hardcoded credential patterns in the changed connector/registry files.
• Official Upstash docs spot-check matched the implemented Basic auth, teams, vector, and audit-log endpoints.

Still not mergeable by policy:

1. Existing review gate remains: PR has no non-author review/reviewDecision, and current authenticated user is the PR author.
2. New verifier-found release-policy blocker: connectors/upstash-api-platform/.npmrc is missing the required ${NPM_TOKEN} auth-token placeholder line from AGENTS.md. I attempted the one-line fix, but the mandated staged Todos redaction scan rejected that exact staged diff as env-secret-assignment, so I removed the uncommitted fix and did not commit through a failing scan.

Follow-up todos: d9daa157 for non-author review access, and 81d5bdae for the .npmrc/redaction scanner conflict.