chore(tests): remove quarantined integration suites

The seven suites excluded from the integration run since 2026-09-25 failed against a
freshly provisioned database (fixtures predate connector and credential changes) and never
ran in CI. Delete them, the quarantine list in vitest.config.ts, their explicit-any baseline
entries, and getCredentialGroupOAuthContext (plus its @sim/testing mock), whose only caller
was the GitHub member suite. The testing rule now says to fix or delete a failing suite
rather than exclude it.

Author: waleedlatif1

.claude/rules/sim-testing.md

@@ -48,8 +48,8 @@ contracts, and demonstrated regressions.
   those checks. Isolate with a unique schema or generated IDs, and clean up in `afterAll`.
 - Integration files run one at a time against one shared database. A new `*.integration.ts` is
   picked up by CI with no workflow change, and the run writes the JSON report configured in
-  `vitest.shared.ts`, which CI uploads. Never add a passing suite to the quarantine list in
-  `apps/sim/vitest.config.ts`.
+  `vitest.shared.ts`, which CI uploads. Never exclude a failing suite from the run in
+  `apps/sim/vitest.config.ts`: fix it or delete it.
 - `bun run test:integration` starts disposable Postgres and Redis containers, provisions the schema,
   and runs both workspaces; pass filenames to narrow the `apps/sim` run.
 

.cursor/rules/sim-testing.mdc

@@ -46,8 +46,8 @@ contracts, and demonstrated regressions.
   those checks. Isolate with a unique schema or generated IDs, and clean up in `afterAll`.
 - Integration files run one at a time against one shared database. A new `*.integration.ts` is
   picked up by CI with no workflow change, and the run writes the JSON report configured in
-  `vitest.shared.ts`, which CI uploads. Never add a passing suite to the quarantine list in
-  `apps/sim/vitest.config.ts`.
+  `vitest.shared.ts`, which CI uploads. Never exclude a failing suite from the run in
+  `apps/sim/vitest.config.ts`: fix it or delete it.
 - `bun run test:integration` starts disposable Postgres and Redis containers, provisions the schema,
   and runs both workspaces; pass filenames to narrow the `apps/sim` run.
 

apps/sim/lib/credential-groups/enrollments.ts

@@ -1348,20 +1348,6 @@ async function completeResolvedCredentialGroupEnrollment(
   })
 }
 
-/** Resolves the private, server-only context bound to a public enrollment link and option. */
-export async function getCredentialGroupOAuthContext(
-  token: string,
-  optionId: string
-): Promise<CredentialGroupOAuthContext | null> {
-  const row = await resolvePublicEnrollmentRowByIdentity({
-    invitationTokenHash: hashInvitationToken(token),
-  })
-  if (!row) return null
-  const option = row.options.find((candidate) => candidate.id === optionId)
-  if (!option || option.status !== 'active') return null
-  return credentialGroupOAuthContextFromRow(row, option)
-}
-
 export async function getAuthorizedCredentialGroupOAuthContext(
   identity: PublicCredentialGroupEnrollmentIdentity,
   optionId: string