feat(tms): add Contentful2 connector creation tools

[Alexandra Cirligeanu (alexandracirligeanu1)]

Summary

• Adds five new TMS tools to support end-to-end Contentful2 connector creation via the Phrase MCP server, enabling Claude to guide a user through the full OAuth flow and connector setup without any manual API calls.

New tools:

tms_list_enabled_connector_types — verify CONTENTFUL2 is available for the org
tms_initiate_connector_oauth — generate the Contentful OAuth URL and session uid
tms_poll_connector_auth_code — retrieve the auth code once the user completes browser authorisation
tms_create_connector — create the connector with the OAuth code and payload
tms_test_connector — verify the connection after creation

Authentication flow:
CF2 uses OAuth 2.0 authorization code flow. There is no API token shortcut — browser authorisation is required. The MCP-adapted version of this flow uses three API2 endpoints that all accept bearer tokens (no session cookie needed):

POST /api2/v1/connectors/connectorAuthData → creates state uid
GET /api2/v1/connectorAuthPage/CONTENTFUL2 → returns OAuth URL template
GET /api2/v1/connectors/connectorAuthCode/{uid} → polls for the auth code

Security
No Contentful credentials ever transit the MCP layer — the user authenticates directly with Contentful in their browser
The OAuth code is single-use and short-lived; receiving it via Claude chat is safe
Phrase's backend handles the token exchange and stores the resulting Contentful access token

Related Issue

• Closes # https://phrase.atlassian.net/browse/TIN-4406

Testing

• npm run build
• npm run lint
• npm run format:check
• npm run test:coverage

Checklist

• I added or updated tests where needed.
  — added the 5 new tool names to EXPECTED_TOOL_NAMES in tools.test.ts
• I updated README and Developer Hub content when behavior or usage changed.
  — connector tools are POC/spike scope
• I considered backward compatibility and noted breaking changes below.

Breaking Changes

• None.
  New tools only; no existing tools or interfaces modified.

[Tom Doischer (tomdoischer)]

Overall the structure and conventions are solid. A few things worth addressing before this graduates from draft — inline comments below.