Cache the auth token for GCS backend

[agoston]

ATM we re-request the auth token before each GCS REST query.

We need to use the built-in oauth refresh mechanism for ServiceAccounts, while for Workload Identity, we probably need a caching of the token.

CloudStorage is cloned per-connection, so it seems to be quite straightforward.