Support GKE Workload Identity Authentication for GCS

GKE clusters and official Google libraries for GCP support workload identity, where the service account of the pod is tied to a GCP service account. The libraries can then get their authentication token via reaching out to the metadata endpoint. This allows for seamless management of access without having to manually manage and rotate JSON files for service accounts.