Stop Exporting Service Account Keys: Workload Identity Federation for Least-Privilege CI/CD on GCP (medium.com)