Add Google Drive document and folder creation

[ndisidore]

• Add approval-gated creation of blank Google Docs, Google Sheets, and folders to account and shared-drive bindings.
• Keep exact-file bindings and Drive-opened native Docs and Sheets read-only; request drive.file only for broad creation-capable grants.
• Revalidate destination scope and current Drive capabilities at submission and apply time, persist durable action outcomes, retry provider creates idempotently, and move created items to trash on revert.
• Update resource declarations, configurator copy, and Google Drive documentation for the new capability boundary.