PPR replace GCP SA keys with container ADC for GCP API calls

[doug-lovett]

Issue #: /bcgov/entity#33582

Description of changes:
SRE has a policy of rotating service account keys every 3 months. Removing the keys from the container configuration removes the need to update the containers and redeploy when the keys change.

• Verify or enable IAM Service Account Credentials API on the project.
• Assign the container service accounts the correct roles: storage admin, pub/sub publisher, and service account token creator.
• Update all PPR jobs that use a GCP SA key: securd party notification.
• Update the PPR API service
• Remove environment variable from container configuration.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of the PPR license (Apache 2.0).