Add scoped google api network policy, its refresh command, and the verified production operations runbook. Ref: IT-1074