Update WLI bindings to bind to k8s SA rather than GCP SA

[Hayden-IO]

Description

K8S binding is the recommended way. This would reduce the need for per-service GCP service accounts. We might be able to remove them entirely, though we need to carefully confirm that.