Code review feedback for Google authentication implementation

[Copilot]

Provided code review feedback on the Google OAuth integration added in commit 976d5cf.

Key Issues Identified

Security & Configuration

• Missing environment variable validation for GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET
• Hardcoded Discord-only whitelist in get_whitelist() doesn't account for Google-authenticated users

Documentation

• README lacks Google OAuth setup instructions (client ID/secret configuration, redirect URI setup)
• No documentation of required environment variables for Google auth

Code Quality

• Button text inconsistency: "Continue with Gmail" should be "Continue with Google"
• Typo in auth.py line 291: "redirec" → "redirect"

Review Notes

The OAuth implementation itself is sound:

• Proper CSRF protection via state parameter
• Secure session handling with appropriate cookie flags
• Error sanitization prevents information leakage
• Clean separation of provider-specific logic

Recommendations provided to the author for addressing environment variable handling and documentation gaps before production deployment.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.