fix: add grant_token_creator flag for pubsub

[franviera92]

Is necessary configure variable grant_token_creator in module pubsub to with value false.

Analysis with checkov detect vulnerability

Check: CKV_GCP_41: "Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level"
FAILED for resource: google_project_iam_member.token_creator_binding
File: /tfplan.json:390-395
Guide: https://docs.bridgecrew.io/docs/bc_gcp_iam_3
391 | "values": {
392 | "condition": [],
393 | "member": "serviceAccount:service-97749614032@gcp-sa-pubsub.iam.gserviceaccount.com",
394 | "project": "tc-sc-bi-bigdata-dp-pmo-dev",
395 | "role": "roles/iam.serviceAccountTokenCreator"
Check: CKV_GCP_49: "Ensure no roles that enable to impersonate and manage all service accounts are used at a project level"
FAILED for resource: google_project_iam_member.token_creator_binding
File: /tfplan.json:390-395
Guide: https://docs.bridgecrew.io/docs/bc_gcp_iam_10
391 | "values": {
392 | "condition": [],
393 | "member": "serviceAccount:service-97749614032@gcp-sa-pubsub.iam.gserviceaccount.com",
394 | "project": "tc-sc-bi-bigdata-dp-pmo-dev",
395 | "role": "roles/iam.serviceAccountTokenCreator"

[comment-bot-dev]

Thanks for the PR! 🚀
✅ Lint checks have passed.

[bharathkkb]

Thanks for the PR @franviera92