Investigate if we can use a different service account for terraform plan

[thdk]

Might be needed once terraform pipelines are configured within this repo. Else everyone could submit a PR changing the pipeline code to run terraform apply instead of terraform plan and the changes are executed automatically.