feat(gmail-auth): request full Gmail scope for filter permissions

README.md

@@ -1154,7 +1154,7 @@ Supported delivery modes:
 1. Create a Google Cloud project with the Gmail API enabled
 2. Create OAuth2 credentials (Desktop application type) and download the JSON file
 3. Run `flynn gmail-auth` to complete the OAuth2 flow and store the refresh token
-   - Requests scopes for both mailbox reads and filter management (`gmail.readonly` + `gmail.settings.basic`)
+   - Requests full Gmail access scope (`https://mail.google.com/`) so all filter operations are allowed
 
 For Pub/Sub delivery (push/pull), also enable the Pub/Sub API and create:
 - A topic (e.g. `projects/your-project/topics/gmail-push`)
@@ -1218,7 +1218,7 @@ When `automation.gmail.enabled: true`, Flynn registers Gmail tools:
 - `gmail.read` — fetch full message body by ID
 - `gmail.filter.create` — create Gmail filters (criteria + actions like archive/label/forward)
 
-`gmail.filter.create` requires a token with `gmail.settings.basic`. If your token was created before this scope was added, re-run `flynn gmail-auth`.
+`gmail.filter.create` requires a token issued with current scopes. If your token predates this change, re-run `flynn gmail-auth`.
 
 ### Template Variables