run BigQuery integration test daily

[stephencompall-DA]

Fixes #1730. Also logs the SA's email in the BQ test for permission debugging.

Successful run.

Needed these grants in IAM on the runner's SA:

- condition:
    description: Limit access to the temporary datasets created by ScanTotalSupplyBigQueryIntegrationTest.
    expression: resource.name.startsWith("projects/da-cn-splice/datasets/scantotalsupply_test_dataset_")
    title: BQ Integration Test datasets only
  members:
  - serviceAccount:splice-kms-integration-test@da-cn-splice.iam.gserviceaccount.com
  role: roles/bigquery.dataEditor
- members:
  - serviceAccount:splice-kms-integration-test@da-cn-splice.iam.gserviceaccount.com
  role: roles/bigquery.jobUser

(Jobs aren't dataset-scoped.)

Pull Request Checklist

Cluster Testing

• If a cluster test is required, comment /cluster_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.
• If a hard-migration test is required (from the latest release), comment /hdm_test on this PR to request it, and ping someone with access to the DA-internal system to approve it.

PR Guidelines

• Include any change that might be observable by our partners or affect their deployment in the release notes.
• Specify fixed issues with Fixes #n, and mention issues worked on using #n
• Include a screenshot for frontend-related PRs - see README or use your favorite screenshot tool

Merge Guidelines

• Make the git commit message look sensible when squash-merging on GitHub (most likely: just copy your PR description).

[stephencompall-DA]

Considering switching to scratchnet or an SA grant/turning on BQ on splice gcp

[info] ***
[info]   "code": 403,
[info]   "errors": [
[info]     ***
[info]       "domain": "global",
[info]       "message": "Access Denied: Project da-cn-splice: User does not have bigquery.datasets.create permission in project da-cn-splice.",
[info]       "reason": "accessDenied"
[info]     ***
[info]   ],
[info]   "message": "Access Denied: Project da-cn-splice: User does not have bigquery.datasets.create permission in project da-cn-splice.",
[info]   "status": "PERMISSION_DENIED"
[info] ***

[Copilot]

Pull Request Overview

This PR sets up daily BigQuery integration testing with service account permission debugging. It creates a scheduled GitHub Actions workflow to run BigQuery tests Monday through Friday and adds logging to help debug service account permissions.

• Added a new GitHub Actions workflow for daily BigQuery integration tests with manual trigger support
• Enhanced BigQuery test logging to display the service account email for permission debugging

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/build.scala_test_bigquery.yml	New workflow file for scheduled daily BigQuery testing
ScanTotalSupplyBigQueryIntegrationTest.scala	Added service account email logging for debugging permissions

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[isegall-da]

Nice thank you.
Nit: how hard is it to have a dedicated SA instead of reusing the kms one? (I don't remember exactly where that's defined)

[stephencompall-DA]

Nit: how hard is it to have a dedicated SA instead of reusing the kms one? (I don't remember exactly where that's defined)

Moved to #1999 tech debt.