Add td-agent role and ship logs via Pub/Sub
Addresses https://gitlab.com/gitlab-com/gl-infra/infrastructure/-/issues/13877
Note that this is not yet configuring Pub/Sub subscribers, so nothing is consuming logs currently.
Edited by Alejandro Rodríguez