A build runner authenticated with the shared default account

One runner used its namespace's shared default account rather than an identity of its own, so the permissions it needed were granted to every workload in that namespace.

It now has a dedicated account holding those permissions, and the runner was brought onto a version pairing supported by the platform it connects to.