Import Contacts For Account

Import Google contacts from ONE account into this workspace, on explicit user consent (the post-connect dialog).

This replaces the fire-and-forget import that used to run inside the OAuth callbacks. Two deliberate differences from the old behaviour:

1. Consent. Nothing imports until the user says yes.
2. One account. auto_import_new_contacts sweeps every contacts-capable account the user owns; this imports only account_id. Connecting one mailbox must never pull in the others (2026-08-11: 4,708 contacts from two personal Gmail accounts landed in a customer's org this way).

authorize_account is the gate — a non-owner, or an account not enabled in this workspace, cannot be imported from.