How inDrive extended AWS-hosted Terraform CI/CD to Google Cloud using Workload Identity Federation, with no service-account keys or GCP runners.