feat(infra): Service account support with domain-wide delegation

[omriariav]

Summary

Support Google Workspace domain-wide delegation via service accounts, enabling server-side automation without interactive OAuth.

Priority: P3 | Complexity: Medium

Commands

gws auth login --service-account key.json --subject admin@company.com

Motivation

gogcli supports this for Workspace admins. Enables CI/CD pipelines and server-side automation.

Implementation

• Accept --service-account flag with path to JSON key file
• Support --subject for domain-wide delegation impersonation
• Alternative to interactive OAuth flow
• Store service account config alongside context settings