### TL;DR Ideally, GitHub actions should use their own service account to authenticate. Therefore it would be helpful to include creation of the SA in the oidc submodule. ### Terraform Resources _No response_ ### Detailed design _No response_ ### Additional information _No response_