feat(tools): add Google Docs, Drive, and Tasks read-only tools

Add three new Google service integrations following the established
Gmail/GCal pattern:

- Google Docs (docs.list, docs.search, docs.read): list, search, and
  read document content as plain text via Docs + Drive APIs
- Google Drive (drive.list, drive.search, drive.read): list, search,
  and read files with export support for Workspace files (Docs→text,
  Sheets→CSV, Slides→text)
- Google Tasks (tasks.lists, tasks.list): list task lists and tasks
  with status, due dates, and notes

Each service has its own config section, OAuth auth command, tool
policy group, and test suite (53 new tests). The setup wizard now
offers to configure all Google services together and run OAuth auth
flows automatically after saving config.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/cli/setup.ts

@@ -7,6 +7,7 @@ import { getConfigPath } from './shared.js';
 import { createPrompter } from './setup/prompts.js';
 import { ConfigBuilder } from './setup/config.js';
 import { runFirstRunWizard, runMenu } from './setup/orchestrator.js';
+import { runGoogleAuth } from './setup/automation.js';
 
 export async function runSetup(configPath: string): Promise<void> {
   const rl = createInterface({ input: process.stdin, output: process.stdout });
@@ -20,10 +21,12 @@ export async function runSetup(configPath: string): Promise<void> {
       const builder = ConfigBuilder.fromObject(parsed);
       await runMenu(p, builder);
       saveConfig(configPath, builder, p);
+      await runGoogleAuth(p, builder.build());
     } else {
       // No config → first-run wizard
       const builder = await runFirstRunWizard(p);
       saveConfig(configPath, builder, p);
+      await runGoogleAuth(p, builder.build());
 
       const shouldStart = await p.confirm('Start Flynn now?', true);
       if (shouldStart) {
@@ -43,6 +46,7 @@ export async function runSetup(configPath: string): Promise<void> {
         const menuBuilder = ConfigBuilder.fromObject(parsed);
         await runMenu(p, menuBuilder);
         saveConfig(configPath, menuBuilder, p);
+        await runGoogleAuth(p, menuBuilder.build());
       }
     }
   } finally {