integriq presents itself to the credential broker as 'openconnector', so allowedApps ['integriq'] is refused with 403 #2435

📋 Plan & voortgang — dit issue wordt uitgewerkt met Claude Code; het volledige plan (stappen, checkboxes, beslissingen, revisielog) staat in readonly-mirror-wilco-claude-plans › issues/github/integriq/integriq-2435. De statuscomments hieronder verwijzen naar dat plan.

What happens

A credential minted for integriq with allowedApps: ["integriq"] is refused on every brokered call:

403 Credential broker refused the request (Request not permitted). If Integriq should be allowed to use this credential, add …

nextcloud.log: [CredentialBrokerService] request denied: app "openconnector" not in allowedApps.

integriq presents itself to OpenRegister's credential broker as openconnector, the old app id. An administrator who follows the error message and allows integriq gets the same 403 again. Allowing openconnector fixes it, and nothing in the UI, the docs or the error says so.

Reproduce

1. OpenRegister + integriq on one instance; the github-api source from lib/Settings/register.d/github-source.json with credentialRef.credentialName: github-publiccode.
2. POST /apps/openregister/api/credentials with {"name":"github-publiccode","provider":"github","secret":"…","allowedApps":["integriq"]}.
3. Run a flow with openconnector.source-paginate on that source → 24× 403, run "completed" with 0 items.
4. PUT /apps/openregister/api/credentials/{id} with {"allowedApps":["integriq","openconnector"]} → calls succeed.

Measured 2026-10-01 on integriq 0.4.10-unstable.20261001075532, openregister 2.1.34-unstable.20261001080921.

Fix options

• BrokeredCallService (or wherever the app id is set on the broker request) sends integriq.
• During the transition, OpenRegister's broker could accept openconnector as an alias for integriq, or integriq's error message could name the id it actually uses.
• The seeded github-api source (and the catalogue entry) could say which app id must be in allowedApps.

Context

Jira: WOO-585. Parent plan: readonly-mirror-wilco-claude-plans › issues/jira/WOO-585 (REPRODUCTIE, finding F3).