Gmail Inbound Webhook

Receive a Gmail Pub/Sub push notification.

Verifies the OIDC JWT, decodes the envelope, schedules background processing, and returns 204 immediately. See module docstring for the full flow.