GET /health            403 Forbidden in 304 ms
  body                   (299 bytes, not shown)
  The server rejected the request's credentials. Cloud Run needs an identity token from an account with roles/run.invoker (`gcloud auth print-identity-token`).