The provider already supports instance- and group-level service accounts but not project-scoped ones. Client-go now exposes the project endpoints (Projects.{Create,List,Delete}ProjectServiceAccount), so we can add an equivalent resource + data source that mirrors gitlab_group_service_account. Useful for automation identities scoped to a single project — e.g. for project-scoped PATs without granting group-wide visibility.