Add support for Cloud Run v2 jobs (#1954)

Add support for Cloud Run v2 jobs

* create a separate file for service creation (service.tf) and job
  (job.tf) - for easy comparison
* add E2E tests where possibile
* remove default value for input variable `region`
* fix subnet range VPC Access Connector example
* add creation of service account for audit logs call (trigger requires
  service account)
* use provided trigger service account email in
  `local.trigger_sa_email`, so explicitly provided SA is passed to
  trigger
* set default value for vpc_connector_create.throughput.max, to match
  what is set by GCP API, as provider uses wrong default of 300 which
  results in perma-diff
* create inventory fiels for all examples

Global changes
* (tests) add input variable `project_number`, to allow assigning IAM permissions to Service Accounts in fixtures
* (tests) fix not outputting the path, when object is not found in inventory
* (tests) fix `create_e2e_sandbox.sh` - now it properly finds root of the repo

Secret Manager
* added `version_versions` output, to allow specifying versions in other modules. `versions` is sensitive and it makes it unsuitable for `for_each` values

New test fixtures
* `pubsub.tf` - creating one topic
* `secret-credential.tf` - creating Secret Manager `credential` secret
* `shared-vpc.tf` - creating two projects (host and service), and vpc in host project
* `vpc-connector.tf` - creating VPC Access Connector instance

tests/fixtures.py

@@ -254,7 +254,7 @@ def validate_plan_object(expected_value, plan_value, relative_path,
   if isinstance(expected_value, dict) and isinstance(plan_value, dict):
     for k, v in expected_value.items():
       assert k in plan_value, \
-        f'{relative_path}: {k} is not a valid address in the plan'
+        f'{relative_path}: {relative_address}.{k} is not a valid address in the plan'
       validate_plan_object(v, plan_value[k], relative_path,
                            f'{relative_address}.{k}')