static-ct-ci ci test

[phbnf]

This PR configures the static-ct-ci project to run the conformance ci test. Review individual commits for ease of review.

The new project uses a cloudbuild-ci SA instead of a -prod one, so modify this while I'm there.

1. Approve this PR once you're ok with it
2. Then I'll apply changes with terraform
3. Then I'll run the workflow manually once to connect the repo with the project
4. Then I'll submit it to make sure that it does the right things
5. Then I'll destroy the old test in static-ct
6. Then I'll send a PR to delete the config in static-ct