Reconnect OAuth email configuration

Generates a fresh OAuth authorisation URL for reconnecting an expired or incorrectly-connected email configuration. Only works for OAuth providers (Microsoft365, Google) — returns 400 for SMTP. Sets the configuration status to PendingOAuthSetup. After the user completes the OAuth flow, the configuration status returns to Active automatically. User must be the owner or the config must be shared.