feat: integrate device media service for local photo access and update service icons/names

ignorefiles/GOOGLE_OAUTH_SETUP.md

@@ -7,7 +7,8 @@
 
 ## Step 2: Enable the Photos Library API
 1. Go to **APIs & Services** → **Library**
-2. Search for **Photos Library API** → Enable it
+2. Search for **Photos Library API** → **Enable** it
+3. ⚠️ This step is **required** — without it, all Photos API calls return 403
 
 ## Step 3: Configure the OAuth Consent Screen
 1. Go to **APIs & Services** → **OAuth consent screen**
@@ -16,13 +17,15 @@
    - **App name**: MASS Photo App
    - **User support email**: your email
    - **Developer contact**: your email
-4. **Scopes** → Add or Remove Scopes:
+4. **Scopes** → Add or Remove Scopes → add these:
    - `openid`
    - `https://www.googleapis.com/auth/photoslibrary`
-   - `https://www.googleapis.com/auth/photoslibrary.appendonly`
    - `https://www.googleapis.com/auth/userinfo.email`
    - `https://www.googleapis.com/auth/userinfo.profile`
-5. **Test users** → Add your Google account email address
+5. **Test users** → **Add your Google account email address**
+   - ⚠️ This is **critical** — if your email is not listed as a test user,
+     Google will silently strip the Photos scope from the granted token,
+     causing a 403 "insufficient authentication scopes" error.
 
 ## Step 4: Create an Android OAuth Client ID
 1. Go to **APIs & Services** → **Credentials**