feat(auth): restore Google sign-in and AI admin test routes

Google OAuth was implemented locally but never deployed; the login button
only renders when AUTH_GOOGLE_ID and AUTH_GOOGLE_SECRET are set. Also
restores /api/ai/test-* endpoints removed by mistake and wires Google
credentials into deploy workflows.

Co-authored-by: Cursor <cursoragent@cursor.com>

.env.docker.example

@@ -30,6 +30,11 @@ NEXTAUTH_SECRET="changethisinproduction"
 # Admin email - The first user registering with this email gets ADMIN role (REQUIRED)
 # ADMIN_EMAIL="admin@yourdomain.com"
 
+# Google OAuth — both required to show "Continue with Google" on /login
+# Redirect URI in Google Console: {NEXTAUTH_URL}/api/auth/callback/google
+# AUTH_GOOGLE_ID="....apps.googleusercontent.com"
+# AUTH_GOOGLE_SECRET="GOCSPX-..."
+
 # =============================================================================
 # POSTGRESQL CONFIGURATION
 # =============================================================================