* create a fixture adding IAM grants to Cloud Run service agent
* add to README.md information about required grant
Decided to add ths as a fixture though it may not be reused so:
* grant is not polluting the example
* grant is fairly easy discoverable from README.md
* setup_module is not burdened with additional grant which is used only
for this example
