output "bucket" {
  value       = google_storage_bucket.data.name
  description = "Snapshot/metadata bucket name."
}

output "loader_reader_sa" {
  value       = google_service_account.loader_reader.email
  description = "Loader reader service account email."
}

output "loader_reader_credential" {
  value       = google_service_account_key.loader_reader.private_key
  description = "Base64 service-account key JSON -> load secrets.env METADB_GCS_CREDENTIAL."
  sensitive   = true
}