feat: support application default credentials for gcp pub/sub triggers (#10778)

* feat: support application default credentials for gcp pub/sub triggers

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* fix: address review findings on gcp application default credentials

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* fix: address review nits on gcp application default credentials

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* fix: key the gcp credential-mode permission off the loaded mode

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* fix: gate enabling an ADC gcp trigger on workspace admin

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* fix: lock the gcp trigger row while authorizing a mode change

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* fix: skip admin-only gcp listing when the caller cannot use those credentials

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* chore: update ee-repo-ref to 54bf630681000c8ed87a7067e357118e015123b1

This commit updates the EE repository reference after PR #738 was merged in windmill-ee-private.

Previous ee-repo-ref: 91d0e228a0ad226625278b400c64f96a61404a10

New ee-repo-ref: 54bf630681000c8ed87a7067e357118e015123b1

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
Co-authored-by: Ruben Fiszel <ruben@windmill.dev>

cli/src/guidance/skills.gen.ts

@@ -8177,13 +8177,21 @@ properties:
   gcp_resource_path:
     type: string
     description: Path to the GCP resource containing service account credentials for
-      authentication.
+      authentication. Omit to authenticate with the instance's application default
+      credentials.
+  project_id:
+    type: string
+    description: GCP project the client operates in. Defaults to the project of the
+      credentials. Topics and subscriptions given as fully qualified names are reached
+      whatever it is.
   topic_id:
     type: string
-    description: Google Cloud Pub/Sub topic ID to subscribe to.
+    description: Google Cloud Pub/Sub topic ID to subscribe to. Accepts a bare ID
+      or a fully qualified name (projects/<project>/topics/<id>).
   subscription_id:
     type: string
-    description: Google Cloud Pub/Sub subscription ID.
+    description: Google Cloud Pub/Sub subscription ID. Accepts a bare ID or a fully
+      qualified name (projects/<project>/subscriptions/<id>).
   delivery_type:
     type: string
     enum:
@@ -8253,7 +8261,6 @@ properties:
 required:
 - script_path
 - is_flow
-- gcp_resource_path
 - topic_id
 - subscription_id
 - delivery_type