Expand GCP Auditors about electriceye

[abaio-westhill]

Adding the following GCP Services/Components to the Auditors
Firebase: do not use default firebase service account
AlloyDB: do not use default alloy service account, ensure continuous backup & recovery is enabled, ensured automated backups are enabled
BigQuery: do not use default bq service account, use policy tags for column level access
BigTable: do not use default service account
Cloud Spanner: do not use default service account
Cloud Functions: do not use default service account, good to require auth depending on use case, require HTTPS, depending on use case only allow internal traffic so traffic is routed through VPC, place in a VPC network so egress traffic is routed through VPC, enable HTTP/2 and session affinity, enforce binary authorization for deployment
Cloud Run - do not use default service account, best to force internal access so traffic has to flow through VPC depening on use case, require authentication depending on use case
GKE (GKE Autopilot will enable a lot of these by default): Binary Auth, CPANs, NetPol, no use GKE default svc acct, PSP controller, Shield GKE, Release Channel K8s, Secure Boot, GCE legacy metadata api disabled, Legacy Auth disabled, IntegMon enabled
GCS: enable bucket logging, depending on use case do not allow public access, enable versioning, enable retention policy, do not use default service account
IAM Service Accounts: should be rotated on some recurring schedule, do not use primitive roles