Add Metabase access review source

Implement Metabase as a first-class access review connector backed by
GET /api/user, including account mapping and error handling in the
driver. Register the provider with API-key auth metadata and required
instance URL settings so connectors can be created and resolved
consistently.

Expose Metabase through the console GraphQL and UI flows by adding the
provider enum value, API-key extra setting field wiring, and source
label mapping. Add migration support for the connector_provider enum and
cover driver/provider behavior with focused tests.

Signed-off-by: Cursor Agent <cursoragent@cursor.com>

Co-authored-by: Bryan FRIMIN <bryan@frimin.fr>
Signed-off-by: Cursor Agent <cursoragent@cursor.com>

apps/console/src/pages/organizations/access-reviews/_components/AccessSourceRow.tsx

@@ -112,6 +112,8 @@ function sourceLabel(connectorProvider: string | null | undefined): string {
       return "Linear";
     case "SLACK":
       return "Slack";
+    case "METABASE":
+      return "Metabase";
     default:
       return connectorProvider;
   }

apps/console/src/pages/organizations/access-reviews/dialogs/AddAccessSourceDialog.tsx

@@ -119,6 +119,9 @@ function mapAPIKeyExtraSettingToField(
     case "ONE_PASSWORD":
       if (settingKey === "scimBridgeUrl") return "onePasswordScimBridgeUrl";
       break;
+    case "METABASE":
+      if (settingKey === "instanceUrl") return "metabaseInstanceUrl";
+      break;
   }
   return null;
 }