gcp: Use CredentialsFromJSONWithTypeAndParams for universe domain support

Update GCP credential loading to use CredentialsFromJSONWithTypeAndParams
and FindDefaultCredentialsWithParams instead of the basic variants. This
ensures that the universe domain specified in the credentials JSON is
automatically applied when creating GCP API clients.

The universe domain is required for sovereign cloud installations to
ensure API calls are directed to the correct endpoints.

Author: barbacbd

pkg/asset/installconfig/gcp/session.go

@@ -182,7 +182,10 @@ type contentLoader struct {
 }
 
 func (f *contentLoader) Load(ctx context.Context) (*googleoauth.Credentials, error) {
-	return googleoauth.CredentialsFromJSON(ctx, []byte(f.content), compute.CloudPlatformScope)
+	// Use CredentialsFromJSONWithParams to ensure universe domain from credentials is applied
+	return googleoauth.CredentialsFromJSONWithParams(ctx, []byte(f.content), googleoauth.CredentialsParams{
+		Scopes: []string{compute.CloudPlatformScope},
+	})
 }
 
 func (f *contentLoader) String() string {
@@ -196,7 +199,10 @@ func (f *contentLoader) Content() string {
 type cliLoader struct{}
 
 func (c *cliLoader) Load(ctx context.Context) (*googleoauth.Credentials, error) {
-	return googleoauth.FindDefaultCredentials(ctx, compute.CloudPlatformScope)
+	// Use FindDefaultCredentialsWithParams to ensure universe domain from credentials is applied
+	return googleoauth.FindDefaultCredentialsWithParams(ctx, googleoauth.CredentialsParams{
+		Scopes: []string{compute.CloudPlatformScope},
+	})
 }
 
 func (c *cliLoader) String() string {