fix(kiloclaw): bind migrate-legacy arrays as text[]

[joshavant]

Summary

• Fix /api/controller/google/migrate-legacy writes to bind scopes and capabilities as explicit text[] SQL expressions instead of relying on raw array interpolation in sql templates.
• Reuse the same safe array binding for all legacy migration update paths so capabilities updates cannot emit tuple-shaped SQL.
• Add a regression test covering migration insert with empty scopes and empty capabilities to prevent 500 regressions on edge payloads.

Verification

• Reviewed generated SQL construction in services/kiloclaw/src/routes/controller.ts and confirmed array writes now use explicit ARRAY[]::text[] / ARRAY[...]::text[] binding.
• Reviewed all writes to kiloclaw_google_oauth_connections in this path to ensure array fields in migrate-legacy are handled consistently.

Visual Changes

• N/A

Reviewer Notes

• Risk is isolated to broker migration write paths in the KiloClaw worker.
• This change targets the production failure mode where malformed array SQL caused migration_endpoint_failed due to server-side 500s.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (2 files)

• services/kiloclaw/src/routes/controller.ts
• services/kiloclaw/src/routes/controller.test.ts