Update the GitLab CI configuration to run tox tests in parallel. This is
not only quicker but also provides more direct feedback about which
version, if any, failed.

We make use of a new dedicated Python package CI template brought in by
the common pipeline.

The Google Cloud KMS is an API driven service with a Python client.
Mostly for historical reasons stemming from the days when logan was a
shell script, we use the gcloud command to decrypt secrets.

Move to using the Python client libraries instead. Update the README to
note that we now use application default credentials which may require
re-authenticating using gcloud.

The Google client libraries require the grpcio Python libraries which,
in turn, require installing some extra packages in the alpine-based
container used to run CI tests.

This is a precursor to using the Secret Manager API to add on-demand
fetching of secrets to logan.