Fix Linear SAML verification and reseal SCIM token

Scripts/authentik-sync-linear-saml.sh

@@ -323,10 +323,20 @@ if [[ -z "${application_pk:-}" ]]; then
 fi
 
 for _ in $(seq 1 30); do
-  if curl -fsS "${authentik_url}/application/saml/${application_slug}/metadata/" >/dev/null 2>&1; then
+  metadata_status="$(
+    curl -sS \
+      -o /dev/null \
+      -w '%{http_code}' \
+      --max-redirs 0 \
+      "${authentik_url}/application/saml/${application_slug}/metadata/" \
+      || true
+  )"
+  case "$metadata_status" in
+    200|301|302|307|308)
       echo "Synced Authentik Linear SAML application ${application_slug} (${application_name})."
       exit 0
-  fi
+      ;;
+  esac
   sleep 2
 done
 

secrets/infra/linear-scim-token.age

@@ -1,11 +1,11 @@
 age-encryption.org/v1
--> ssh-ed25519 ux4N8Q 6LanICpiWi1sozNr5HJDWCGb6QFBktRQ0dH2wfFSu2g
-jc83UfFoFvxAXcu4O/b6KC+1AyZq/k9IHzx6fL8DHoQ
--> ssh-ed25519 IrZmAg r1ggts4fiWOGHoD7IY+cVEgECOUFaulJ1ATSX6/wB2Q
-NnKRd8FNKXpCrANK2q2mFJjWYccqInzGNHjK7oJNNS0
--> ssh-ed25519 0kWPgQ G3i+VXIhED5crwLZoF8cTcaljYENq7K0DAy5mTHsNkk
-+eJThDXro6DpNghlcziQv64rg8j0mcm3UfGVHcctI6w
--> X25519 2yw5RabY1hp/of6RLpKI2ao0AwBOzNdeOR4M9YRwmhY
-vCe9r9ayAsDcLkyt4/c9EBZpU/DrkGKj8KLbSF9YCHo
---- Lgi0Th/QpSFhDP7JK+jenEIvI0aQfQ3oQ6sl2homLu4
-礽?-d<>:橥備<E6A9A5>濙咩怄蘖腨强*狺獯
+-> ssh-ed25519 ux4N8Q Tb3hxc6ZscCQpr7s8raup25FA8YAmq30jHZfOQp28Xs
+L9YhaX9IVinud0IOs5K55ldGx82wjXHxnVBHZnRjiTA
+-> ssh-ed25519 IrZmAg etIe6hWDP9YkqDFCWybnvsOh7h8YO+z3tKc95pG64lU
+BT3rH5a+LJZWv2xtWPbMJGS2oM9v4mOI9WPmnHebiew
+-> ssh-ed25519 0kWPgQ YpCf5m16VaKp7d+C3oF9MJQB/0xzCNtD7ODsTiV8t1o
+xG8G/kSM+7VrWHm299A7fG/kBFnoiWZPiDZuldvimLw
+-> X25519 ETltnMPR7lWbBWJvJKmNZhS7wqX0WCa4aNu8UKzxMVE
+Ys57VNuclgvN1nJIrLjNrwekbosa7KK9lFt0PTpr/MQ
+--- ZeUmSOf8+NycQAFRGCJHYcQvTJqSBIGKEOEdCnNfJbE
+±<»qìª1.ï›O_š×ÇÕ¤7–AÛ·_@%/Â5Ël½7J÷Œõɵ<19>Ä<EFBFBD>üAxÆØûÐèüb
"B