fix(security): default service account sentinel and partial deploy validation#10779

inlined merged 4 commits into

mainfirebase/firebase-tools:mainfrom

requires-role-6-default-safirebase/firebase-tools:requires-role-6-default-saCopy head branch name to clipboard