Google signup/login route.

The public Google credential path is in place. Connect Google OAuth client credentials in deployment secrets before automatic sign-in is enabled. Manual subscription activation remains the approval gate.