DeepSeekBot Connect: Google consent screen says workos.com instead of DeepSeekBot #2522

Problem and context / 问题与背景

In the Production WorkOS environment, signing in with Google shows Google's page "Sign in to continue to workos.com" instead of DeepSeekBot. Seen 2026-10-21 in the app (Pair → account → Sign in) and on the Host's device page. The Prod Google OAuth client is our own (see docs/agents/workos-social-login.md); WorkOS custom domains were declined (paid add-on).

Smallest useful scope / 最小有用范围

Find out why Google names workos.com: an unverified or unpublished consent screen (app name and logo need Google's brand verification), or Google showing the redirect domain api.workos.com. Fix what can be fixed without the paid custom domain, for example by publishing and verifying the consent screen with the DeepSeekBot name, logo, homepage and privacy links. Record the outcome in the runbook. Check Apple, Microsoft and GitHub screens the same way.

How to verify / 如何验收

A fresh Google sign-in in a private window shows DeepSeekBot (name and logo) on Google's screen, or the runbook records why it cannot without a custom domain.