fix: production frontend is chat.studentcompanionai.rw — allow CORS + redirect there

fix: OAuth callback redirected to wrong Vercel domain

feat: email briefing — Gmail OAuth + spoken inbox summary (/api/email/*)