ETS-backed cache for Google service-account OAuth access tokens.

Tokens are scoped to the configured service account and cached for 55 minutes (Google issues 1-hour tokens; we refresh slightly early to avoid race conditions). The ETS table is created lazily on first access, so the cache needs no supervision tree entry.