Builds the Google consent URL for the configured client + redirect.
Portal Google config (clientId, redirectUri).
Opaque CSRF state echoed back to the callback.
Fully-qualified consent URL.
Builds the Google consent URL for the configured client + redirect.