fix(gdpr): use connect.sid for Substack credentials

[eshurakov]

Summary

• use the Substack connect.sid cookie when normalizing stored credentials
• default the publication URL to https://blog.kilo.ai and share that behavior with the deletion handler
• update admin guidance, environment documentation, and focused tests

Verification

• oxfmt --list-different passed
• type-aware oxlint passed with 0 warnings and 0 errors
• git diff --check passed
• targeted Jest could not start because this worktree has no installed dependencies and the external Jest setup is missing ts-node

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Executive Summary

Re-reviewed the rewritten connect.sid credential and default publication-URL changes with high confidence; no correctness, security, or runtime issues on changed lines.

Files Reviewed (3 files)

• apps/web/src/app/admin/deletion-queue/DeletionQueueContent.tsx
• apps/web/src/lib/user/deletion-queue/deletion-substack-credential.test.ts
• apps/web/src/lib/user/deletion-queue/deletion-substack-credential.ts

Previous Review Summary (commit 200540c)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit 200540c)

Status: No Issues Found | Recommendation: Merge

Executive Summary

Reviewed the Substack connect.sid credential and default publication-URL changes with high confidence; no correctness, security, or runtime issues on changed lines.

Files Reviewed (6 files)

• ENVIRONMENT.md
• apps/web/src/app/admin/deletion-queue/DeletionQueueContent.tsx
• apps/web/src/lib/user/deletion-queue/deletion-constants.ts
• apps/web/src/lib/user/deletion-queue/deletion-substack-credential.test.ts
• apps/web/src/lib/user/deletion-queue/deletion-substack-credential.ts
• apps/web/src/lib/user/deletion-queue/handlers/substack.ts

---

_{Reviewed by grok-4.6 · Input: 53K · Output: 6.1K · Cached: 339.5K}

_{Review guidance: REVIEW.md from base branch main}

[pandemicsyn]

Bot flagged one, but i think as long as theres no deletions in flight when this rolls out its kind of a non issue.

[pandemicsyn]

bot: Legacy stored substack.sid cookies are not migrated to connect.sid.

Suggested fix: Recognize and rewrite the legacy cookie name in raw cookie material before returning it (including when it appears in a multi-cookie header), then add a regression test for substack.sid=.... Add or update a handler-level test that stores the legacy value and asserts the outbound deletion request sends connect.sid=.... This is needed because the deletion handler calls this normalizer for persisted credentials, while its existing test setup still stores substack.sid=test-cookie.