Function build_authorize_url 

pub fn build_authorize_url(
    registration: &GeminiRegistration,
    challenge: &str,
    state: &str,
    port: u16,
) -> String

Build a Google installed-app authorization URL with PKCE (S256), offline access, and forced consent so a refresh token is always issued.