Add PBM support for Workload Identity Authentication

For workloads running on GCE, fetch the service account token from the metadata server to allow for access to GCP services without explicit keys.