Add runbook for rotating GCS service account keys for web/api

This adds a missing runbook with details on how to rotate the GCS storage key used by web/api nodes to talk to GCS.