Google OAuth: configure client ID/secret and redirect URIs, then implement flow.