Store a new connected account (OAuth tokens, platform user ID, platform name). One connection per user per platform; use updateTokens if the user reconnects. Returns public shape (no tokens) so callers never receive secrets.
Store a new connected account (OAuth tokens, platform user ID, platform name). One connection per user per platform; use updateTokens if the user reconnects. Returns public shape (no tokens) so callers never receive secrets.