v0.2.0 — Setup wizard, subscription registry, archive/restore/block, sweeps

Highlights

• gmail-mgr setup wizard — detects installed browsers, walks you through Cloud Console, runs OAuth. First-run goes from ~15 minutes to ~3.
• Subscription registry — every sender you scan is tracked in ~/.gmail-mgr/subs.db with status (active / unsubscribed / trashed / blocked / archived). View with gmail-mgr subs.
• Sweeps — gmail-mgr sweep --status unsubscribed --action trash re-applies an action across every sender at a status. Cron-friendly.
• More bulk actions — archive, mark-read, restore, block (creates Gmail filters that auto-trash future mail).
• GUI — domain grouping, size metric, Subscriptions panel, "also block" checkbox in the trash modal.
• Per-user config at ~/.gmail-mgr/ (browser pref, credentials, token, registry) — runs from any directory after first setup.
• Security hardening — SSRF guard on body-link unsubscribes (refuses loopback / RFC1918 / cloud-metadata IPs); body-link path is now opt-in (default off).