feat: add 1Password CLI to the logan build image

Some products will start to use the 1Password terraform provider to automate
the loading of external secrets into the product specific GCP secret manager.
In turn, the 1Password terraform provider currently calls the 1Password CLI.