ci-cd

Keyless GitHub Actions Deploys to GCP with Workload Identity

Stop pasting service account JSON keys into GitHub Secrets. Workload Identity Federation lets Actions authenticate to GCP with short-lived OIDC tokens.