refactor(tools): detect the saved-credential picker with isSavedCredentialPicker

credentialSuppliedParamsFor matched any oauth-input feeding oauthCredential,
without the credentialKind === 'service-account' check isSavedCredentialPicker
applies. It now uses that predicate. No registered block changes: every block
whose loose-match picker lacks the service-account kind has no tool that
declares credentialSuppliedParams.

Author: waleedlatif1

apps/sim/tools/shared/saved-credentials.ts

@@ -78,12 +78,9 @@ export function isSavedCredentialPicker(
  */
 export function credentialSuppliedParamsFor(
   oauth: Pick<OAuthConfig, 'credentialSuppliedParams'> | undefined,
-  subBlocks: readonly Pick<SubBlockConfig, 'canonicalParamId' | 'type'>[]
+  subBlocks: readonly Pick<SubBlockConfig, 'type' | 'credentialKind' | 'canonicalParamId'>[]
 ): ReadonlySet<string> {
-  const hasPicker = subBlocks.some(
-    (subBlock) => subBlock.type === 'oauth-input' && subBlock.canonicalParamId === 'oauthCredential'
-  )
-  return new Set(hasPicker ? oauth?.credentialSuppliedParams : [])
+  return new Set(subBlocks.some(isSavedCredentialPicker) ? oauth?.credentialSuppliedParams : [])
 }
 
 /**