OIDC deploy works in the main workflow but fails after being moved into a reusable file

The same shell commands now lose cloud auth because the reusable boundary no longer exposes the permission surface the original workflow relied on.