Proposed title of this feature request
ccoctl - Add permission compute.subnetworks.use to the host project

What is the nature and description of the request?
When installing a cluster into shared VPC (XPN) with manually created credentials, the compute.subnetworks.use permission for the machine-api operator credential must be granted to the host project (XPN installs use networks from a host project and create resources in a service project).

Why does the customer need this? (List the business requirements here)
Currently, customer cannot successfully install a cluster into shared VPC without manually granting the compute.subnetworks.use permission to the host project.

If ccoctl can do this by default, it would enhance customer's success rate and experience when using Openshift on GCP.

List any affected packages or components.

Cloud Credentials Operator