Project service principals can hold org-wide roles

Project-level service principals can now be assigned organization-level roles, such as Project Creator or Group Admin. This allows a single principal authenticated with workload identity federation (WIF) to securely automate organization-wide tasks without needing static, org-level keys. Key Update: You can now grant organization-level permissions to project-level service principals, simplifying secure and large-scale automation.