Use local GoogleCredential in the nomulus tool

The scenarios in which the credential is used are:

1) Calls to Nomulus GAE HTTP endpoints.
2) Calls to Google APIs within the tool.
3) Calls to GAE APIs within the tool.

From now on the tool should not depend on ADCs created from gcloud any more (expect for beam pipeline deployments which need some more investigation as the dependency on ADC is not apparent). Using the nomulus tool requires running "nomulus login" first, but only once.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=224165735

java/google/registry/config/files/default-config.yaml

@@ -285,17 +285,15 @@ credentialOAuth:
     - https://www.googleapis.com/auth/apps.groups.settings
   # OAuth scopes required to create a credential locally in for the nomulus tool.
   localCredentialOauthScopes:
-    # Call App Engine APIs.
+    # View and manage data in all Google Cloud APIs.
+    - https://www.googleapis.com/auth/cloud-platform
+    # Call App Engine APIs locally.
     - https://www.googleapis.com/auth/appengine.apis
     # View your email address.
     - https://www.googleapis.com/auth/userinfo.email
-  # OAuth scopes required for accessing App Engine Admin API using the
-  # AppIdentityCredential.
-  appEngineAdminApiCredentialOauthScopes:
     # View and manage your applications deployed on Google App Engine
     - https://www.googleapis.com/auth/appengine.admin
 
-
 icannReporting:
   # URL we PUT monthly ICANN transactions reports to.
   icannTransactionsReportingUploadUrl: https://ry-api.icann.org/report/registrar-transactions

java/google/registry/config/files/nomulus-config-production-sample.yaml

@@ -44,6 +44,7 @@ icannReporting:
 oAuth:
   allowedOauthClientIds:
     - placeholder.apps.googleusercontent.com
+    - placeholder-for-proxy
 
 rde:
   reportUrlPrefix: https://ry-api.icann.org/report/registry-escrow-report
@@ -69,3 +70,7 @@ keyring:
   activeKeyring: KMS
   kms:
     projectId: placeholder
+
+registryTool:
+  clientId: placeholder.apps.googleusercontent.com
+  clientSecret: placeholder