feat: update OAuth scopes for Confluence, Gmail, Google Calendar, Google Drive, and Jira connectors

surfsense_web/content/docs/connectors/gmail.mdx

@@ -37,10 +37,16 @@ This guide walks you through setting up a Google OAuth 2.0 integration for SurfS
 
 1. Click **Add or Remove Scopes**
 2. Add the following scopes:
-   - `https://www.googleapis.com/auth/gmail.readonly` - Read Gmail messages
+   - `https://www.googleapis.com/auth/gmail.modify` - Read, compose, send, and permanently delete Gmail messages
    - `https://www.googleapis.com/auth/userinfo.email` - View user email address
+   - `https://www.googleapis.com/auth/userinfo.profile` - View user profile info
+   - `openid` - OpenID Connect authentication
 3. Click **Update** and then **Save and Continue**
 
+<Callout type="info">
+  The `gmail.modify` scope is required for HITL (Human-in-the-Loop) tools like sending emails, creating drafts, and trashing messages. If you only need read access, you can use `gmail.readonly` instead, but HITL tools will not work.
+</Callout>
+
 ## Step 4: Create OAuth Client ID
 
 1. Go to **APIs & Services** > **Credentials**