Preview Vendor Contact Workos Users

Credentials for the vendor WorkOS environment, supplied per request.

backend/api/backfills.py is mounted on the main backend, whose module-level workos_client is bound to the main WorkOS environment. The identities this backfill creates need to land in the vendor environment instead, so the target environment's credentials travel with the request rather than living in a second set of env vars on the main service (see helpers/workos_auth.build_workos_client). SecretStr keeps the key out of logs and out of any response that happens to echo the request body.

Dry run for the vendor-contact WorkOS backfill. Writes nothing.