Surface FORBIDDEN errors as persistent access warnings

[stylessh]

Summary

• Detects GitHub FORBIDDEN/OAuth App access restriction errors across all API layers and surfaces them as dismissible bottom-bar warnings prompting users to configure organization access.
• In the cache layer (getOrRevalidateGitHubResource), returns stale cached data on FORBIDDEN errors (30s TTL) instead of crashing — same pattern as rate limit handling. Covers PR detail, issue detail, repo overview, review files, etc.
• In my-pulls/my-issues search loops, extracts the restricted org name from FORBIDDEN errors and passes forbiddenOrgs to the client via the result type.
• DashboardErrorScreen now also creates a persistent warning when showing a FORBIDDEN error, so it survives navigation.

Test plan

• Verify that accessing an org with OAuth restrictions shows a dismissible warning in the bottom bar with "Configure access" action
• Verify that previously cached pages return stale data instead of error screens when FORBIDDEN occurs
• Verify that the warning opens the GitHub access dialog when clicked
• Confirm no type errors (tsc --noEmit) and existing cache tests pass

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	diffkit	dc39b1c	Commit Preview URL Branch Preview URL	Apr 13 2026, 06:09 PM