GitHub Actions to Google Cloud: Replace Service Account JSON Keys with Workload Identity Federation
Replace exported service account keys in GitHub Actions with Workload Identity Federation: compare three supported auth options, set up a conditional binding, and validate with positive and fork-PR negative tests.