Stores job caches in a Google Cloud Storage bucket. Authentication uses Application Default Credentials (ADC): Workload Identity on GKE, the GOOGLE_APPLICATION_CREDENTIALS environment variable, or gcloud user credentials for local development. No HMAC keys or service-account JSON are stored in Jenkins.