Add more service accounts to Workload Identity Federation

[jdangerx]

PR Overview

This adds a bunch of new service account associations to the WIF provider we set up earlier, so that other repos can also use WIF instead of credentials.

I've already run terraform apply here so the changes should be reflected within GCP already.

Note that the build-deploy-pudl and zenodo-cache-sync actions are triggered via schedule and workload_dispatch, so the versions on main are the ones that will run. Which means that they'll continue to use the old credentials jsons until this lands in main.

PR Checklist

• Merge the most recent version of the branch you are merging into (probably dev).
• All CI checks are passing. Run tests locally to debug failures

[codecov]

Codecov Report

Base: 85.7% // Head: 85.7% // No change to project coverage 👍

Coverage data is based on head (2f640b3) compared to base (149860f).
Patch has no changes to coverable lines.

Additional details and impacted files

@@          Coverage Diff          @@
##             dev   #2273   +/-   ##
=====================================
  Coverage   85.7%   85.7%           
=====================================
  Files         73      73           
  Lines       8997    8997           
=====================================
  Hits        7713    7713           
  Misses      1284    1284           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

[zschira]

Just browsed the terraform docs/got up to speed with the WIF work, and this looks good and reasonable to me!