Evidence-led risk assessment of Google Cloud Commercial Public Cloud: compositional IAM authority, machine and agent identities, MCP, evidence and exit.