Exchanges an OAuth code for tokens and returns the verified email.
Portal Google config (clientId, clientSecret, redirectUri).
Authorization code from the consent redirect.
Procedure with the email on success, or failure on error (including a token-endpoint timeout, surfaced through the catch path).
Exchanges an OAuth code for tokens and returns the verified email.