Allow specifying of service account to override creating one

The module always creates a service account to run the function.

Allow the consumer to specify a service account to use as they may already have one with additional permissions, or want a single account to run more than one function.