fix(runtime): refuse an OAuth agent's api-action forward by name from one credential × target-door table, and mark it in list_actions

fix(runtime): refuse an OAuth agent's api-action forward by name from one credential × target-door table, and mark it in list_actions #40284