Autogenerate API Key violates PoLP

We use Expel to monitor GCP and it’s barking whenever someone has Firebase Studio create an API key.

[Potential over grant of GCP service account permissions - service-944930368260@gcp-sa-firebase.iam.gserviceaccount.com]