gcp,google_workspace: remove duplicate fields

[efd6]

What does this PR do?

This fixes field definition duplications in gcp and google_workspace.

• gcp is a regression
• google_workspace was not discovered in previous rounds of deduplication which depend on elastic-package check and are stochastic.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Author's Checklist

• [ ]

How to test this PR locally

Related issues

• For [meta] ECS 8.5 Updates (Security External Integrations) #4338
• Updates sei: multiple packages with duplicated field definitions #4398

Screenshots

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2022-10-06T00:19:10.448+0000

• Duration: 21 min 20 sec

Test stats 🧪

Test	Results
Failed	0
Passed	129
Skipped	0
Total	129

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

[elasticmachine]

🚀 Benchmarks report

Package gcp 👍(4) 💚(0) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
audit	1633.99	1360.54	-273.45 (-16.74%)	💔

Package google_workspace 👍(4) 💚(1) 💔(1)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
groups	5649.72	3496.5	-2153.22 (-38.11%)	💔

To see the full report comment with /test benchmark fullreport

[elasticmachine]

🌐 Coverage report

Name	Metrics % (covered/total)	Diff
Packages	100.0% (11/11)	💚
Files	100.0% (11/11)	💚 2.508
Classes	100.0% (11/11)	💚 2.508
Methods	94.475% (171/181)	👍 4.186
Lines	96.273% (2971/3086)	👍 4.638
Conditionals	100.0% (0/0)	💚

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

[djptek]

I did a grep for the fields & TBH I'm not 100% clear which ones should go and which not as I'm not familiar with this integration so I'll trust you on that as the formatting looks fine. LGTM

[efd6]

In general I'm choosing the ECS external definitions unless there is a local value being assigned to the field.

[tommyers-elastic]

gcp changes LGTM. thanks!