fix(oauth): narrow Google connector scopes

[mohammedahmed18]

Summary

• Narrow Google Docs OAuth to drive.metadata.readonly and Google Calendar OAuth to calendar.events.owned.
• Add Google OAuth verification manifests and tests that keep runtime scopes, registry scopes, and verification scopes aligned.
• Document demo coverage gaps for Gmail, Google Docs, and Google Calendar OAuth verification.

Test Plan

• cargo fmt --all -- --check
• git diff --check
• jq empty connectors/registry.json connectors/registry.schema.json connectors/oauth-verification/*.json
• cargo test -p localityd --test connector_manifest
• cargo test -p locality-auth-core
• cargo test -p locality-google-docs
• cargo test -p locality-google-calendar
• cargo test -p loc-cli --test connect
• cargo test -p localityd --test source_descriptor
• npm run check (apps/oauth-service)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
locality	Ready	Preview	Aug 17, 2026 5:43pm