Require CLIENT_SECRET for new access-review connectors → Drop Snyk, Ramp, Lever, Deel access-review providers

- Require CLIENT_SECRET for new access-review connectors
- Use Heroku account UUID as ExternalID
- Bump GitHub orgs picker to per_page=100
- Drop Snyk, Ramp, Lever, Deel access-review providers

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>

pkg/connector/providers.go

@@ -128,20 +128,10 @@ var (
 			AuthURL:  "https://app.asana.com/-/oauth_authorize",
 			TokenURL: "https://app.asana.com/-/oauth_token",
 		},
-		"SNYK": {
-			AuthURL:      "https://app.snyk.io/oauth2/authorize",
-			TokenURL:     "https://api.snyk.io/oauth2/token",
-			RequiresPKCE: true,
-		},
 		"NETLIFY": {
 			AuthURL:  "https://app.netlify.com/authorize",
 			TokenURL: "https://api.netlify.com/oauth/token",
 		},
-		"RAMP": {
-			AuthURL:           "https://app.ramp.com/v1/authorize",
-			TokenURL:          "https://api.ramp.com/developer/v1/token",
-			TokenEndpointAuth: "basic-form",
-		},
 		"CLICKUP": {
 			AuthURL:  "https://app.clickup.com/api",
 			TokenURL: "https://api.clickup.com/api/v2/oauth/token",
@@ -159,31 +149,6 @@ var (
 			AuthURL:  "https://auth.monday.com/oauth2/authorize",
 			TokenURL: "https://auth.monday.com/oauth2/token",
 		},
-		// Lever runs on Auth0: the `audience` parameter is required in
-		// BOTH the authorize URL and the token-exchange POST body. The
-		// trailing slash on the audience value is mandatory.
-		"LEVER": {
-			AuthURL:  "https://auth.lever.co/authorize",
-			TokenURL: "https://auth.lever.co/oauth/token",
-			ExtraAuthParams: map[string]string{
-				"audience": "https://api.lever.co/v1/",
-				"prompt":   "consent",
-			},
-			TokenExtraParams: map[string]string{
-				"audience": "https://api.lever.co/v1/",
-			},
-		},
-		// Deel: the token endpoint path is "/oauth2/tokens" (plural) —
-		// Deel's docs are inconsistent on the singular vs plural form.
-		// The API base host (api.letsdeel.com) differs from the auth host
-		// (app.deel.com). Deel's token endpoint requires HTTP Basic auth
-		// (base64(client_id:client_secret)); credentials placed in the
-		// form body are rejected with 401 invalid basic credentials.
-		"DEEL": {
-			AuthURL:           "https://app.deel.com/oauth2/authorize",
-			TokenURL:          "https://app.deel.com/oauth2/tokens",
-			TokenEndpointAuth: "basic-form",
-		},
 	}
 )