fix: isolate PaC execution service account

.tekton/sub2rank-nc01-pac.yaml

@@ -10,7 +10,7 @@ metadata:
     pipelinesascode.tekton.dev/max-keep-runs: "8"
     unidesk.ai/pac-admission-provenance: admission-pac-v2:platform-infra-sub2rank-nc01
     unidesk.ai/owning-config-ref: "config/platform-infra/sub2rank.yaml#delivery"
-    unidesk.ai/effective-config-sha256: sha256:335c9e900a9b11998b8881e08ab36b89dce9c8c62397b5317ba3e9399f985336
+    unidesk.ai/effective-config-sha256: sha256:e4d95e74410816956a8f848eb379bf73d26bab130db498fd69a442c0a1725e5d
     unidesk.ai/source-artifact-renderer: sub2rank-platform-service
     unidesk.ai/source-artifact-mode: embedded-pipeline-spec
   labels:
@@ -419,7 +419,7 @@ spec:
           - name: manifest-template-b64
             value: $(params.manifest-template-b64)
   taskRunTemplate:
-    serviceAccountName: default
+    serviceAccountName: sub2rank-nc01-tekton-runner
     podTemplate:
       hostNetwork: true
       dnsPolicy: ClusterFirstWithHostNet