Support new style service account principalsets in project factory

[ludoo]

This allows using the new style principalsets that refer to all the project service accounts in the project factory, like in this example.

shared_vpc_service_config:
  host_project: dev-spoke-0
  network_users:
    - principalSet://cloudresourcemanager.googleapis.com/projects/${project_number}/type/ServiceAccount