KMS key must have primary, current key does not have primary version set upon creation, or it must get rotated before justification/validation integ tests.
Need two ID token for authentication since aud (cloud run URL) is different, but google-github-actions/auth seems can only have one in a single job? Need more investigation. --> fixed, typo issue.
Two issues