Autopilot should use provided service account if specified rather than always using default SA

Due to a provider bug, module always uses default SA, but this has probably been fixed. See:

• GKE autopilot is always created with default service account