Import Contacts For Account

Import Google contacts from ONE account into this workspace, on explicit user consent (the post-connect dialog).

This replaces the fire-and-forget import that used to run inside the OAuth callbacks. Two deliberate differences from the old behaviour:

1. Consent. Nothing imports until the user says yes.
2. One account. auto_import_new_contacts sweeps every contacts-capable account the user owns; this imports only account_id. Connecting one mailbox must never pull in the others (2026-08-11: 4,708 contacts from two personal Gmail accounts landed in a customer's org this way).

authorize_account is the gate — a non-owner, or an account not enabled in this workspace, cannot be imported from.

google-5 (2026-09-09): the default response is now a google_contacts_import background job ({job_id, status: "queued"}) rather than the import running inline on the request — a page reload used to lose all progress/outcome (no job row, no social_sync_runs row) because nothing durable existed to bind to. A second click while one is already pending/processing for this account returns that SAME job instead of starting a new run. Pass ?sync=1 for the OLD synchronous body (imported_count/error/...) — kept only for a caller that has not moved to the job-based response yet.