dynamically create service account for gcp-sa-auth-shared-flow about devrel

[seymen]

If we are still blocked to dynamically create this in our gcp project (e.g. project access), then we should document how a fork can reproduce this and test.

[danistrebel]

Having IAM permissions to create service accounts from within the pipeline might pose some additional security risk.

I acknowledge the clunkiness point though. We could provide the instructions as a 2-line shell scripts for users to get set up quickly?

[seymen]

Happy with that.

[laughingbiscuit]

this has been added to the pipeline