Automate Google Token checks

[joanbono-bf]

It'd be great if there is some automation if a Google token is found:

For example, in Google-Services.plist if there's a Firebase token, perform the GET request to the Firebase endpoint:

GET /.json HTTP/1.1
Host: <firebase_endpoint_from_google_plist>

If returns something different to 403, then probably the endpoint is not properly configured.

Also, for Google Maps API keys, use gap to perform checks to look for vulnerabilities.