Resolve identity in actions and pass organizationId into sub-queries, since runQuery from an action does not propagate auth. Add live GitHub repository search backed by the stored encrypted credential, persisting results into gitRepositories. Webhook now targets CONVEX_SITE_URL directly instead of the web origin.