Preserve the underlying Google token validation failure and log safe request context so ID token issues are easier to debug. Co-authored-by: Cursor <cursoragent@cursor.com>