PR #15144 — address CodeRabbit CHANGES_REQUESTED feedback

BOLT-2025 connect-subgraph stacked PR. Branch BOLT-2025/connect-subgraph. Address 4 actionable + 2 nitpick CodeRabbit comments: (1) validate /v2/sites response shape in client, (2) handle REVOKED authorizations explicitly in completion flow, (3) reject workspaceId changes for apps with fleet authorizations, (4) remove mutable workspaceId from UpdateSolarEdgeConnectAppInput GraphQL schema and resolver forwarding, (5) move workspace check before SolarEdge call in recovery flow, (6) dedupe recovery path queries in catch block. Run local checks, push, monitor CI.