Integration Errored Notification, Backfill Integration Metadata, Fix DomainScan Assets

[matoszz]

Changes + logging updates in an attempt to fix at least 5+ observed errors actively occurring in production related to integrations (and being reported in #alerts-sink)

• Dropped the asset_name_owner_id unique index (schema + migration + regen); domain_scan_import now sets source_identifier on create, matches on it before name, and stamps it onto name-matched rows. Removes the duplicate key error and makes scan-import and asset_sync converge on one row
• Fixed durable log identity; emit sites use intobvs.WithContext; new WithInstallation + owner_id field, applied in Reconcile and both execution entry points; gala's listener-failure line now carries envelope_properties. Fixes reconcile failures logging with no tenant or integration references
• cloudflare asset-sync/scan-poll/scan-submit now wrap the upstream error with %w instead of discarding it, plus account/page/cursor context
• googledrive and googleworkspace log why config/metadata was missing and stop swallowing decode errors; upsert conflicts log the lookup key vs record name; registry misses log every registered definition id
• googledrive folderId required; added jsonschema:"required", validatePayload checks an absent payload as {} so required fires, and StartIntegrationAuth refuses to issue Drive scopes until it validates (new ErrIntegrationUserInputRequired).
• Misconfig signalling + scan status -> startup backfill flags connected installs failing user-input validation as ERRORED with an org notification
• inalizeDomainScan now takes the terminal status so a failed scan can't be reported completed

[sonarqubecloud]

Quality Gate failed

Failed conditions
5.6% Coverage on New Code (required ≥ 20%)

See analysis details on SonarQube Cloud