docs: authenticate GCS with IAM account via metadata server

Created by: michaellzc

TODO

• Deploy a test GKE cluster with workload identity enabled see if it also works.

Test plan

this is validated by https://github.com/sourcegraph/deploy-sourcegraph-managed/pull/489