Gherkin spec for connecting YouTube/Vimeo accounts and configuring optional per-provider BYO AI credentials: connections sync subscriptions, tokens/keys are stored only as secret references (never in the clear), revocation stops watching but preserves history. Encodes the secrets-by-reference and data-isolation guardrails (ADR-002, ADR-006, data-model).