Get Google SSO configuration

Returns the current organization's Google SSO policy. Google is enabled by default using the shared instance OAuth app; a configuration only exists when the org has set an explicit policy (e.g. disabled Google). null means no explicit policy — Google follows the instance default.