Allow ordinary workflows to reuse exact saved node credentials while
keeping Builder actor-scoped. Recheck bindings at read and OAuth refresh.
Scope isolated runs to their executed nodes and resolve native provider
aliases. Persist refreshes without database-specific UPDATE RETURNING.