connectors 0.5.11

Fixed

• Keep delegated GitLab repository reads alive after the two-hour OAuth access token expires.
  GitLab refresh responses may omit scope; Connectors now accepts that documented response shape
  and continues to verify the refreshed token's exact scopes through /oauth/token/info before
  committing the rotated access and refresh credentials.
• Make the CLI credential-store test create the owner-only state root required by the runtime,
  instead of depending on the hosted runner's /tmp permissions and blocking releases in CI.

What's Changed

• gitlab: accept refresh responses without scope by @timofriedlberlin in #8

Full Changelog: v0.5.10...v0.5.11