Breaking: Service Account IDs Read-Only; Private Connectivity for AWS/Azure
The `serviceAccountId` fields in `AwsAccessRole` and `AzureProperties` are now read-only, a breaking change. New `serviceDirectoryService` fields enable private network connections to AWS and Azure via Cross-Cloud Interconnect.