Phase 3B: Gmail Client
Authenticated gmail.Service with auto-saving token refresh. LatestMessageIDs (Gmail History API → INBOX/PRIMARY message IDs + cursor). FetchMessage (raw MIME via base64url). httptest-mocked tests; real OAuth flow lands in Phase 3F.