fix(integrations): add HubSpot Leads OAuth scope; fix reconnect wiping org defaults

CedarCopilot wants to merge 3 commits into staging from fix/hubspot-leads-scope-and-reconnect-safety