DM-53738: Create bigquery-kafka account with access to BigQuery

[stvoutsin]

PR to enable bigquery-kafka (bridge) service account

Changes:

• Add bigquery-kafka service account and workload identity binding for the bigquery-kafka application with permissions to read and run jobs to BigQuery.
• Added "bigquery.googleapis.com" to activate_apis
• Bump dev cloudsql version to trigger upgrade

[fajpunk]

LGTM.

• The billing project change is a bug in the Google Cloud Terraform provider, it'll be fine to apply.
• Not sure why the butler dbs are showing a backup location change, but that shouldn't actually be a change, and should be fine to apply.
• Enabling the bigquery API may fail on apply due to the permissions of the service account that the pipeline uses. If it does, we can enable manually and try applying again, and it should run cleanly.