"""Google Workspace platform-management domain.

Holds the orphan-account inventory (shared mailboxes, service accounts,
historical contractor leftovers) and the per-person account-provisioning
service that runs at HRIS confirm time.

The Google Workspace *driver* lives at
``app/integrations/drivers/google_workspace.py`` — that's the per-tenant
HTTP layer (Admin SDK calls, scopes, retries). This domain is the
business layer above it: which person gets which email, what to do
with un-matched accounts, owner-handover blocking on offboarding.
"""