GS: Managed spreadsheet layout and manual refresh route

Parent: #398
Depends on: #400

Design:

• docs/design/google-sheets/architecture.md
• docs/design/google-sheets/spreadsheet-layout.md
• docs/design/google-sheets/authentication.md

Scope

Create and attach the managed control/data/state worksheets, developer metadata, refresh hyperlink, focused refresh route, authentication-intent restoration, and destination verification.

Acceptance criteria

• Linked spreadsheets use stable numeric sheet IDs plus developer metadata.
• The control sheet exposes refresh/status/source actions without secrets.
• _ASB_STATE and staging sheets are hidden and validated as untrusted input.
• Refresh URLs contain only an opaque binding ID in the fragment.
• Opening the link serves the ordinary SPA and resumes after ClickHouse authentication.
• Google authorization is requested explicitly and edit access is verified.
• Renaming or moving a spreadsheet does not break identity.
• A copied spreadsheet is detected and offers explicit relink/remove/cancel choices.
• SQL Browser never identifies resources by sheet name alone.

Non-goals

Query upload/publication semantics, scheduled refresh, or inbound Google callbacks.

Inizia leggendo docs/design/google-sheets/architecture.md, docs/design/google-sheets/spreadsheet-layout.md e docs/design/google-sheets/authentication.md, quindi esamina la issue padre #398 e la dipendenza #400. Il lavoro è completato quando sono implementati i comportamenti managed-sheet, refresh-route, authentication, identity e copied-spreadsheet elencati, ogni criterio di accettazione è soddisfatto e i non-goals indicati sono esclusi.