Google sign-in is configured server-side; wire the button to /api/auth/google with an ID token.