Feature request: Gmail draft-only mode for CLI+agent workflows

[escape0707]

Please consider adding a Gmail draft-only mode/policy to gws.

Desired behavior:

• allow reading Gmail as configured
• allow creating/updating drafts
• block all send paths

In particular, this mode should prevent:

• users.messages.send
• users.drafts.send
• reply / reply-all / forward actions that result in sending
• any equivalent helper/tool aliases

A common agent workflow is: let the agent prepare Gmail drafts for human review, but guarantee that it cannot actually send mail.

That “draft yes, send no” boundary would be very useful for agent integrations.

Notes:

I understand this may depend on Gmail/OAuth/API limitations. If true Google-enforced draft-only permission is not currently possible, a gws-side policy/tool filter would still be very valuable.

If this request belongs in another repo/team, please feel free to redirect it.