Add Workspace audit logs sink to FAST

[juliocc]

https://cloud.google.com/logging/docs/audit/gsuite-login-samples

    workspace-audit-logs = {
      filter = "logName:\"/logs/cloudaudit.googleapis.com%2Fdata_access\" 
      type   = "logging"
    }

[ludoo]

+1, we should then either export all data access logs (the filter above), or find a way to further refine the filter to only capture CI logs.

[ludoo]

workspace-audit-logs = {
  filter = "logName:\"/logs/cloudaudit.googleapis.com%2Fdata_access\" and protoPayload.serviceName:\"login.googleapis.com\""
  type   = "logging"
}