Complete Google Ads OAuth

Handles Google’s redirect: exchanges the code, stores the grant on the workspace’s Google destination, and returns to the dashboard.