Context improvements: "all service accounts" principal in folder, org, project modules; custom roles in factory condition vars for FAST stage 0 (#3548)

* iam principalsets

* fix folder

* add custom roles to factory condition vars in stage 0

* project shared vpc IAM

fast/stages/0-org-setup/factory.tf

@@ -34,7 +34,12 @@ module "factory" {
   )
   data_overrides = local.project_defaults.overrides
   context = merge(local.ctx, {
-    condition_vars = local.ctx_condition_vars
+    condition_vars = merge(local.ctx_condition_vars, {
+      custom_roles = merge(
+        try(local.ctx.condition_vars.custom_roles, {}),
+        module.organization[0].custom_role_id
+      )
+    })
     custom_roles = merge(
       local.ctx.custom_roles,
       module.organization[0].custom_role_id