Add Google Analytics, Dotfile, Segment and Square access-review connectors

Two OAuth2 and two API-key connectors:

- Google Analytics (GA4): OAuth2 with both analytics.readonly and
  analytics.manage.users.readonly (readonly alone 403s on the accounts
  list); v1alpha accessBindings enumerated at account and property level
  and merged by email; manual account picker (Pattern 1) with a
  per-connection probe and name resolver; distinct from Google Workspace.
- Dotfile: API key in the X-DOTFILE-API-KEY header (Pattern 3); GET
  /v1/users (owner/admin, suspended_at) with a static probe.
- Segment (Twilio): Public API token as Bearer with a required Region
  setting (US or EU) mapped to the regional host; GET /users plus per-user
  GET /users/{id} for roles and /invites for pending members; per-connection
  BuildProbeURL.
- Square: OAuth2 (EMPLOYEES_READ) or a personal access token (Pattern 3);
  POST /v2/team-members/search returns email/status/is_owner directly, so no
  role resolution; custom probe and name resolver.

Google Analytics and Square are confidential OAuth clients, wired into the
bootstrap OAuth provider list and .env.example. Segment carries a required
extra setting, so the console add-source dialog maps region onto its
segmentRegion API-key input; without that mapping the value is silently
dropped and the create is rejected.

Cassette-backed driver tests plus unit tests for the Segment probe URL and
the bootstrap OAuth provider list.

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>

pkg/coredata/connector_provider.go

@@ -60,32 +60,36 @@ const (
 	ConnectorProviderClickUp      ConnectorProvider = "CLICKUP"
 	// ConnectorProviderClerk is disabled (unregistered) but kept in IsValid
 	// and the GraphQL enum so existing stored CLERK rows still validate.
-	ConnectorProviderClerk      ConnectorProvider = "CLERK"
-	ConnectorProviderVercel     ConnectorProvider = "VERCEL"
-	ConnectorProviderMonday     ConnectorProvider = "MONDAY"
-	ConnectorProviderMetabase   ConnectorProvider = "METABASE"
-	ConnectorProviderTailscale  ConnectorProvider = "TAILSCALE"
-	ConnectorProviderAnthropic  ConnectorProvider = "ANTHROPIC"
-	ConnectorProviderCursor     ConnectorProvider = "CURSOR"
-	ConnectorProviderDatadog    ConnectorProvider = "DATADOG"
-	ConnectorProviderOkta       ConnectorProvider = "OKTA"
-	ConnectorProviderZendesk    ConnectorProvider = "ZENDESK"
-	ConnectorProviderQovery     ConnectorProvider = "QOVERY"
-	ConnectorProviderRender     ConnectorProvider = "RENDER"
-	ConnectorProviderNeon       ConnectorProvider = "NEON"
-	ConnectorProviderMercury    ConnectorProvider = "MERCURY"
-	ConnectorProviderApollo     ConnectorProvider = "APOLLO"
-	ConnectorProviderDeepgram   ConnectorProvider = "DEEPGRAM"
-	ConnectorProviderClickHouse ConnectorProvider = "CLICKHOUSE"
-	ConnectorProviderLangfuse   ConnectorProvider = "LANGFUSE"
-	ConnectorProviderPylon      ConnectorProvider = "PYLON"
-	ConnectorProviderOpenRouter ConnectorProvider = "OPENROUTER"
-	ConnectorProviderIncidentIO ConnectorProvider = "INCIDENT_IO"
-	ConnectorProviderBrevo      ConnectorProvider = "BREVO"
-	ConnectorProviderScaleway   ConnectorProvider = "SCALEWAY"
-	ConnectorProviderYousign    ConnectorProvider = "YOUSIGN"
-	ConnectorProviderRailway    ConnectorProvider = "RAILWAY"
-	ConnectorProviderCrisp      ConnectorProvider = "CRISP"
+	ConnectorProviderClerk           ConnectorProvider = "CLERK"
+	ConnectorProviderVercel          ConnectorProvider = "VERCEL"
+	ConnectorProviderMonday          ConnectorProvider = "MONDAY"
+	ConnectorProviderMetabase        ConnectorProvider = "METABASE"
+	ConnectorProviderTailscale       ConnectorProvider = "TAILSCALE"
+	ConnectorProviderAnthropic       ConnectorProvider = "ANTHROPIC"
+	ConnectorProviderCursor          ConnectorProvider = "CURSOR"
+	ConnectorProviderDatadog         ConnectorProvider = "DATADOG"
+	ConnectorProviderOkta            ConnectorProvider = "OKTA"
+	ConnectorProviderZendesk         ConnectorProvider = "ZENDESK"
+	ConnectorProviderQovery          ConnectorProvider = "QOVERY"
+	ConnectorProviderRender          ConnectorProvider = "RENDER"
+	ConnectorProviderNeon            ConnectorProvider = "NEON"
+	ConnectorProviderMercury         ConnectorProvider = "MERCURY"
+	ConnectorProviderApollo          ConnectorProvider = "APOLLO"
+	ConnectorProviderDeepgram        ConnectorProvider = "DEEPGRAM"
+	ConnectorProviderClickHouse      ConnectorProvider = "CLICKHOUSE"
+	ConnectorProviderLangfuse        ConnectorProvider = "LANGFUSE"
+	ConnectorProviderPylon           ConnectorProvider = "PYLON"
+	ConnectorProviderOpenRouter      ConnectorProvider = "OPENROUTER"
+	ConnectorProviderIncidentIO      ConnectorProvider = "INCIDENT_IO"
+	ConnectorProviderBrevo           ConnectorProvider = "BREVO"
+	ConnectorProviderScaleway        ConnectorProvider = "SCALEWAY"
+	ConnectorProviderYousign         ConnectorProvider = "YOUSIGN"
+	ConnectorProviderRailway         ConnectorProvider = "RAILWAY"
+	ConnectorProviderCrisp           ConnectorProvider = "CRISP"
+	ConnectorProviderDotfile         ConnectorProvider = "DOTFILE"
+	ConnectorProviderSegment         ConnectorProvider = "SEGMENT"
+	ConnectorProviderSquare          ConnectorProvider = "SQUARE"
+	ConnectorProviderGoogleAnalytics ConnectorProvider = "GOOGLE_ANALYTICS"
 )
 
 var (
@@ -150,6 +154,10 @@ func ConnectorProviders() []ConnectorProvider {
 		ConnectorProviderYousign,
 		ConnectorProviderRailway,
 		ConnectorProviderCrisp,
+		ConnectorProviderDotfile,
+		ConnectorProviderSegment,
+		ConnectorProviderSquare,
+		ConnectorProviderGoogleAnalytics,
 	}
 }
 
@@ -210,7 +218,11 @@ func (v ConnectorProvider) IsValid() bool {
 		ConnectorProviderScaleway,
 		ConnectorProviderYousign,
 		ConnectorProviderRailway,
-		ConnectorProviderCrisp:
+		ConnectorProviderCrisp,
+		ConnectorProviderDotfile,
+		ConnectorProviderSegment,
+		ConnectorProviderSquare,
+		ConnectorProviderGoogleAnalytics:
 		return true
 	}