fix(merge): import staging's new code from this branch's module homes

- Snowflake's keyless server reads parseTokenServiceAccountSecretBlob from
  token-service-accounts/secret-blob, where this branch moved it; the old
  token-service-accounts/server import no longer exports it, and reaching it
  pulled every token validator into the lib/auth graph (about 48 modules on
  each Platform route).
- The new Bitbucket, DocuSign and Microsoft app docs pages import Callout and
  Steps from @sim/emcn-docs, as every other docs page here does.
- Regenerated block names (github_v3) and the Platform permission catalog.

Author: waleedlatif1

apps/docs/content/docs/integrations/bitbucket-service-account.mdx

@@ -3,8 +3,8 @@ title: Bitbucket access tokens
 description: Connect Bitbucket Cloud to Sim with a workspace, project, or repository access token instead of a personal account
 ---
 
-import { Callout } from '@/components/ui/callout'
-import { Step, Steps } from '@/components/ui/steps'
+import { Callout } from '@sim/emcn-docs/callout'
+import { Step, Steps } from '@sim/emcn-docs/steps'
 
 Connect Bitbucket Cloud with an access token when a workflow should act as an integration rather than as the person who connected it. An access token belongs to a workspace, project, or repository, not to a user, so it keeps working when people leave and its reach is limited to what it was created for.
 

apps/docs/content/docs/integrations/docusign-service-account.mdx

@@ -3,8 +3,8 @@ title: DocuSign JWT Grant
 description: Connect DocuSign to Sim with an integration key and RSA keypair that acts as one DocuSign user, instead of a personal OAuth connection
 ---
 
-import { Callout } from '@/components/ui/callout'
-import { Step, Steps } from '@/components/ui/steps'
+import { Callout } from '@sim/emcn-docs/callout'
+import { Step, Steps } from '@sim/emcn-docs/steps'
 
 Connect DocuSign with JWT Grant when a workflow should keep working without anyone signing in again. Sim signs a short-lived assertion with your app's RSA private key, exchanges it for an access token that acts as one DocuSign user, and repeats that every hour. DocuSign issues no refresh token for JWT Grant, so nothing expires as long as the key and the user's consent stay in place.
 

apps/docs/content/docs/integrations/microsoft-app-credentials.mdx

@@ -3,8 +3,8 @@ title: Microsoft app credentials
 description: Run Microsoft Entra ID, SharePoint, Dataverse, and Dynamics 365 blocks as an app registration with a client secret, a certificate, or a keyless federated credential that trusts Sim
 ---
 
-import { Callout } from '@/components/ui/callout'
-import { Step, Steps } from '@/components/ui/steps'
+import { Callout } from '@sim/emcn-docs/callout'
+import { Step, Steps } from '@sim/emcn-docs/steps'
 
 A Microsoft app credential signs in as a Microsoft Entra app registration instead of a person (the OAuth 2.0 client credentials flow). One credential works for the **Azure AD** (Microsoft Entra ID), **SharePoint**, **Microsoft Dataverse**, and **Dynamics 365** blocks. Connecting a Microsoft account through OAuth keeps working exactly as before; the app credential is an additional option in the same account picker.
 

apps/sim/lib/block-metadata/names.generated.ts

@@ -485,6 +485,7 @@ export const REGISTERED_BLOCK_NAMES: Readonly<Record<string, string>> = {
   generic_webhook: 'Webhook Trigger',
   github: 'GitHub (Legacy)',
   github_v2: 'GitHub',
+  github_v3: 'GitHub',
   gitlab: 'GitLab',
   gitlab_v2: 'GitLab',
   gmail: 'Gmail (Legacy)',
@@ -892,6 +893,7 @@ export const HIDDEN_FROM_TOOLBAR_BLOCK_TYPES: readonly string[] = [
   'flint',
   'gamma',
   'github',
+  'github_v2',
   'gitlab',
   'gmail',
   'google_calendar',

apps/sim/lib/credentials/snowflake-service-account.server.ts

@@ -9,7 +9,7 @@ import {
 } from '@/lib/credentials/principal'
 import { parseServiceAccountConfig } from '@/lib/credentials/service-account-config'
 import { SNOWFLAKE_SERVICE_ACCOUNT_PROVIDER_ID } from '@/lib/credentials/token-service-accounts/descriptors'
-import { parseTokenServiceAccountSecretBlob } from '@/lib/credentials/token-service-accounts/server'
+import { parseTokenServiceAccountSecretBlob } from '@/lib/credentials/token-service-accounts/secret-blob'
 import { validateSnowflakeWorkloadIdentity } from '@/lib/credentials/token-service-accounts/validators/snowflake'
 import { WORKLOAD_IDENTITY_AUDIENCES } from '@/lib/credentials/workload-identity/audiences'
 import {

apps/sim/platform/fixtures/settings/permission-catalog.generated.json

@@ -3644,7 +3644,7 @@
       ]
     },
     {
-      "type": "github_v2",
+      "type": "github_v3",
       "name": "GitHub",
       "description": "Interact with GitHub or trigger workflows from GitHub events",
       "category": "tools",