preset-database-connectionslisted

# preset-database-connections Use for credential-bearing database connection reads and database connection changes. ## Always - Use `preset-api`, `preset-workspaces`, and `preset-superset` first. - Prefer `preset-datasets` metadata before reading connection configuration. - Treat connection configuration as credential-bearing even on `GET`. - Get explicit confirmation before configuration reads, validation, OAuth, upload, create, update, or delete. - Redact SQLAlchemy URIs, passwords, private keys, SSH tunnel passwords, server certificates, access tokens, and engine `extra` secrets. ## Decision Rules - Classify connection configuration as credential-bearing. - Permit metadata summary only unless the user approves a credential-bearing read. - Require approval before credential-bearing configuration reads, validation, OAuth, upload, create, update, sync permissions, or delete. - Forbid printing URI, password, private key, token, certificate, SSH password, or engine extras. ## Workflow Order 1. Resolve database connection metadata. 2. Identify credential-bearing fields and endpoint risk. 3. Prepare approval summary for configuration read, validation, OAuth, upload, create, update, or delete. 4. Stop before credential-bearing configuration read, validation, OAuth, upload, create, update, or delete. ## Retrieve - Connection configuration routing: [references/connection-configuration.md](references/connection-configuration.md) - Credential-bearing configuration reads and r