ADC Quota Project Requirement & Persistent Tracking

[krisrowe]

Problem\nWhen using Application Default Credentials (ADC) with Google APIs (like Calendar), the request may fail with a 403 error if a quota project is not explicitly set. This occurs because local ADC credentials don't provide a project context by default for certain APIs.\n\n### Analysis\n- The user must run gcloud auth application-default set-quota-project <PROJECT_ID> to resolve this.\n- This project should be labeled gws-access=default per our internal standards.\n- Our tooling currently doesn't persist this selection, leading to potential 'interface drift' where a profile refresh or re-setup results in lost quota project settings.\n\n### Proposed Fix\n1. Add auth.project_id to gwsa configuration.\n2. In auth.py, if mode is ADC and auth.project_id is present, use it as the quota_project_id when calling google.auth.default().\n3. This ensures the tool remains resilient even if the underlying environment's ADC file is recreated without the quota project.