feat: added impersonation as authentication method instead of JSON keys

[caio1985]

This adds impersonation as the main method to authenticate against Google Cloud as it is safer than using locally stored credentials that could be stolen. It also adds a few headers to the backend server to avoid CORS errors when serving the frontend.