#1138 / #1139: extract @perryts/google-auth + Android Glance widget build path

[proggeramlug]

Summary

• @perryts/google-auth: real GoogleSignIn SDK integration (MVP ships a not-yet-implemented stub) — follow-up to #674 #1138 — extract @perryts/google-auth from the perry workspace into PerryTS/google-auth as a standalone npm package, with the real GoogleSignIn SDK Swift bridge (iOS/macOS) and androidx.credentials CredentialManager Kotlin bridge (Android). The v0.5.847 MVP shipped as a not-yet-implemented stub — downstream (GSC Master) was blocked from removing its perry-searchbird-google-auth fork.
• [[widget]] Android Glance build path — wire glance_source (deferred in #1018 / #676) #1139 — wire the Android Glance widget build path in widget_build.rs. [[widget]] entries with a glance_source field used to warn-and-skip; now they get the same treatment as swift_source (sources copied into Gradle project, widget_info_<name>.xml emitted, <receiver> injected into AndroidManifest).
• Pre-existing fix: 2 IncomingMessage manifest entries (__get_statusMessage, __get_headers) restored to crates/perry-api-manifest/src/entries.rs — the v0.5.1014 native_table.rs restoration had a manifest-side drift that was failing every_dispatch_entry_has_manifest_counterpart on every PR (e.g. fix(android): unblock build + JNI bridge for the default Android target #1159 cargo-test). Adding the two missing rows makes the gate green.

The new @perryts/google-auth repo's initial commit is PerryTS/google-auth@71dc3e6 (not yet pushed to a remote — please create the GitHub repo + push). The published npm install @perryts/google-auth flow goes live once the repo is on GitHub and npm publish runs.

What lives in this PR vs the new google-auth repo

Concern	Lives in
Swift bridge over GIDSignIn.sharedInstance.signIn(withPresenting:...) / restorePreviousSignIn / signOut	new google-auth repo (crate-ios/swift/google_auth_bridge.swift)
Kotlin bridge over CredentialManager.getCredential(GetGoogleIdOption)	new google-auth repo (crate-android/kotlin/PerryGoogleAuth.kt)
Rust shims (iOS + Android crate-android + crate-stub)	new google-auth repo
package.json perry.nativeLibrary declarations (functions / targets / kotlin_sources / gradle_dependencies)	new google-auth repo
TS shim (src/index.ts) with typed GoogleSignInResult	new google-auth repo
Remove crates/perry-ext-google-auth, types/perry/google-auth, well_known_bindings.toml entry, native_table.rs rows, runtime_decls.rs decls, api-manifest entries, test_google_auth_compile.ts smoke	THIS PR
inject_google_auth_info_plist (writes GIDClientID / GIDServerClientID / GIDDefaultScopes from perry.toml [google_auth] into the iOS Info.plist)	THIS PR (crates/perry/src/commands/compile.rs)
inject_google_auth_android_resources (writes google_auth_server_client_id into app/src/main/res/values/google_auth.xml)	THIS PR (crates/perry/src/commands/run.rs)
wire_native_lib_kotlin_sources general resolver (scans node_modules for nativeLibrary.targets.android.kotlin_sources + gradle_dependencies and merges them into the Gradle project)	THIS PR (crates/perry/src/commands/run.rs)
perry_android_jvm() weak extern (extern "C" fn perry_android_jvm() -> *mut JavaVM) used by external nativeLibrary crates that need to JNI-call into Kotlin from Rust	THIS PR (crates/perry-ui-android/src/jni_bridge.rs)
PerryActivity reflection-call to PerryGoogleAuth.install(this) (no-op when class isn't present)	THIS PR (crates/perry-ui-android/template/.../PerryActivity.kt)
build_declared_widgets_android — copies Kotlin sources, emits appwidget-provider XML, injects <receiver> into AndroidManifest	THIS PR (crates/perry/src/commands/compile/widget_build.rs)

Test plan

• cargo build --release -p perry
• cargo build --release -p perry-runtime -p perry-stdlib
• cargo test --release -p perry widget_build (9/9 green; 5 new tests cover receiver-class detection, XML escaping, Kotlin source filtering)
• cargo test --release -p perry-codegen --test manifest_consistency (4/4 green after the 2 IncomingMessage rows were added)
• cargo test --release --workspace --exclude perry-ui-{ios,tvos,watchos,visionos,android,windows,gtk4} — passes (workspace test command from CLAUDE.md)
• Not exercised in this session — end-to-end iOS GoogleSignIn flow against a real device + GoogleSignIn.framework on path
• Not exercised in this session — end-to-end Android CredentialManager flow against a real emulator + Play Services
• Not exercised in this session — Android Glance widget render against GSC Master's 3-widget suite (TopSites / QuickStats / DailyChange)
• Out of scope — perry-searchbird-google-auth fork removal in GSC Master (downstream migration once the npm package publishes)

Follow-ups

• The CFBundleURLSchemes entry for the reversed clientID (com.googleusercontent.apps.<id>) is currently a manual step — users add it to package.json perry.deepLinks.schemes or [ios.info_plist]. Auto-emission needs to merge into the existing CFBundleURLTypes array without duplicating the key; tracked as a follow-up in @perryts/google-auth: real GoogleSignIn SDK integration (MVP ships a not-yet-implemented stub) — follow-up to #674 #1138's comment thread.
• Push the PerryTS/google-auth repo to GitHub + run the first npm publish --provenance --access public (.github/workflows/publish.yml is wired and runs on release).
• watchOS widget build path (watchos_source) still warn-and-skips — that's the remaining Feature request: official @perryts/widgets package for WidgetKit / Glance build glue #676 slice.