Fix K2 Think JSON parsing and secure default configs

feat: integrate Google OAuth, ArXiv discovery and project-based analysis

Initial clean backend deployment