Next step: add CALENDAR_ICS_URL on Vercel (public/private iCal link) so we can sync without Google OAuth.

Note: ICS timezone handling is best-effort. For perfect TZ fidelity we can add TZID support later.