fix(tiktok): constrain webhook routing migration

Author: Bill Leoutsakos

packages/db/migrations/0282_tiktok_routing_key.sql

@@ -17,6 +17,9 @@ INNER JOIN "credential"
 	ON "credential"."id" = (("webhook"."provider_config")::jsonb ->> 'credentialId')
 	AND "credential"."type" = 'oauth'
 	AND "credential"."provider_id" = 'tiktok'
+INNER JOIN "workflow"
+	ON "workflow"."id" = "webhook"."workflow_id"
+	AND "workflow"."workspace_id" = "credential"."workspace_id"
 INNER JOIN "account"
 	ON "account"."id" = "credential"."account_id"
 	AND "account"."provider_id" = 'tiktok'

packages/db/schema.ts

@@ -833,11 +833,6 @@ export const jobExecutionLogs = pgTable(
   })
 )
 
-/** Extracts the canonical credential ID persisted in webhook provider configuration. */
-export function webhookCredentialIdExpression(column: AnyPgColumn): SQL<string> {
-  return sql<string>`((${column})::jsonb ->> 'credentialId')`
-}
-
 export const webhook = pgTable(
   'webhook',
   {