I finally figured out a subtle wart in my email setup: Google snootily expects the DNS reverse lookups on my domain’s email server’s IP address to resolve to the exact same FQDN hostname as is stated during the HELO handshake my server makes with gmail.