Private distribution install + consent HTTP APIs.
Install / Re-authorize app
Install uninstalls any previous grant first so HubSpot shows the consent screen (not auto-approve).
After install, POST /api/provision-schema for that portal.