feat(sailpoint): add SailPoint (IGA) integration

Add a SailPoint Identity Security Cloud integration with 27 tools spanning
identity-governance reads (search + count + aggregate, identities, accounts,
entitlements, roles, access profiles, sources, account activities, campaigns,
certifications, and entitlement expansion), the access-request write path
(request, cancel, status), and CSV account/entitlement aggregation.

Auth uses a service-identity Personal Access Token via the OAuth2
client-credentials grant against the per-tenant host
(https://{tenant}.api.identitynow.com), resolved server-side in two internal
routes (/api/tools/sailpoint/query and /load) with in-process token caching
and Retry-After 429 backoff. The block enumerates the exact PAT scopes and the
service-identity caveat. Access-request constraints (revoke one identity + one
item, grant 25-entitlement / 10-identity caps, comment-on-revoke) are enforced
pre-submission, and empty userAuth reads surface a permission-gap diagnostic.

Author: mzxchandra

apps/docs/components/icons.tsx

@@ -5166,6 +5166,18 @@ export function PipedriveIcon(props: SVGProps<SVGSVGElement>) {
   )
 }
 
+export function SailPointIcon(props: SVGProps<SVGSVGElement>) {
+  return (
+    <svg {...props} xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24' fill='none'>
+      <path
+        fill='currentColor'
+        d='M7.25 2.4c5.66 1.7 9.2 6.86 9.9 15.35a.75.75 0 0 1-.75.81H7.25a.75.75 0 0 1-.75-.75V3.12a.75.75 0 0 1 .95-.72Z'
+      />
+      <rect fill='currentColor' x='3' y='19.9' width='18' height='1.8' rx='.9' />
+    </svg>
+  )
+}
+
 export function SalesforceIcon(props: SVGProps<SVGSVGElement>) {
   return (
     <svg {...props} xmlns='http://www.w3.org/2000/svg' viewBox='0 0 273 191'>

apps/docs/components/ui/icon-mapping.ts

@@ -190,6 +190,7 @@ import {
   RootlyIcon,
   RssIcon,
   S3Icon,
+  SailPointIcon,
   SalesforceIcon,
   SapConcurIcon,
   SapS4HanaIcon,
@@ -470,6 +471,7 @@ export const blockTypeToIconMap: Record<string, IconComponent> = {
   rootly: RootlyIcon,
   rss: RssIcon,
   s3: S3Icon,
+  sailpoint: SailPointIcon,
   salesforce: SalesforceIcon,
   sap_concur: SapConcurIcon,
   sap_s4hana: SapS4HanaIcon,

apps/docs/content/docs/en/integrations/meta.json

@@ -200,6 +200,7 @@
     "rocketlane",
     "rootly",
     "s3",
+    "sailpoint",
     "salesforce",
     "salesforce-service-account",
     "sap_concur",