Move tests that require GCM_SECRET to cloud build.

[bwplotka]

Following recommendations those should be moved out of GH actions.

Also we could use ADC instead flow https://cloud.google.com/docs/authentication/application-default-credentials#GAC (common envvar and file)