Add approval-gated Google Drive folders and Sheets writes

[scott-edwards]

What changed

• add a folder-scoped Google Drive Gatekeeper resource with approval-gated uploads
• add approval-gated Google Sheets update and append actions
• keep staged bytes and action state in durable SQLite storage
• add configurator, generated resource types, documentation, and bounded validation

Why

Cloudflare OS apps need native user-introduced Google resources for document output and spreadsheet sync. The current Google Gatekeeper offers read-only Sheets access and no folder-scoped Drive upload resource.

Safety

• every write returns a pending native action
• Drive authority is narrowed to one selected folder
• Sheet writes require bounded A1 ranges and rectangular data
• uploads are limited to 10 MiB and pending action data is cleared after an outcome
• uncertain upload outcomes fail closed and are not retried automatically

Validation

• pnpm --filter @gadgets/google-gatekeeper test
• pnpm --filter @gadgets/google-gatekeeper exec tsc --noEmit
• Google Gatekeeper Wrangler dry run
• full pnpm test
• full pnpm lint
• full pnpm build
• git diff --check

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}