fix(copilot): clarify knowledge connector authentication

[waleedlatif1]

Summary

• Correct the connector overview so API-key connectors do not require OAuth credentials.
• Verify GitLab PAT and secret-reference setup through the actual Copilot tool, including encrypted storage, synchronization, retrieval, and workspace access enforcement.

Type of Change

• Bug fix

Testing

• 176 focused unit tests and 5 PostgreSQL integration tests passed. Integration tests use fixture GitLab HTTP replies and embeddings with real creation, persistence, sync, and retrieval.
• App type-check, repository lint, all 47 audits, and generated-artifact checks passed.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 23, 2026 4:42pm UTC

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 3 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge, with the production guidance matching the existing connector schemas and execution behavior.

Summary

This PR corrects Copilot’s connector overview so authentication guidance distinguishes OAuth credentials from API keys, and expands coverage of GitLab connector creation through the Copilot tool.

• Documents credentialId, secret-reference/raw-key, and dual-auth setup paths.
• Adds serializer coverage for GitLab’s API-key schema.
• Exercises application and Copilot connector creation with raw and environment-referenced PATs, including encrypted persistence, synchronization, retrieval, and workspace authorization.

_{Reviews (1) · Last reviewed commit: "fix(copilot): clarify knowledge connecto..."}