🐛 skip disabled AlloyDB API during GCP discovery (#7343)

cnspec scan gcp aborted with PermissionDenied when the AlloyDB API
was not enabled in the project, because alloydb.clusters / instances /
backups bubbled the raw gRPC error and discovery.go stops the scan on
any discovery target error. AlloyDB was the one service in the Auto
discovery set missing the skippable-error pattern that backupdr, batch,
cloudbuild, dlp, eventarc, gke_backup and others already use.

Guard each ListX iterator with isGRPCSkippable so disabled APIs,
missing permissions, or NotFound locations degrade gracefully with
a warning instead of failing the whole scan.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: vjeffrey

providers/gcp/resources/alloydb.go

@@ -11,6 +11,7 @@ import (
 
 	alloydb "cloud.google.com/go/alloydb/apiv1"
 	"cloud.google.com/go/alloydb/apiv1/alloydbpb"
+	"github.com/rs/zerolog/log"
 	"go.mondoo.com/mql/v13/llx"
 	"go.mondoo.com/mql/v13/providers-sdk/v1/plugin"
 	"go.mondoo.com/mql/v13/providers-sdk/v1/util/convert"
@@ -82,6 +83,10 @@ func (g *mqlGcpProjectAlloydbService) clusters() ([]any, error) {
 			break
 		}
 		if err != nil {
+			if isGRPCSkippable(err) {
+				log.Warn().Err(err).Msg("could not list AlloyDB clusters")
+				return nil, nil
+			}
 			return nil, err
 		}
 
@@ -297,6 +302,10 @@ func (g *mqlGcpProjectAlloydbServiceCluster) instances() ([]any, error) {
 			break
 		}
 		if err != nil {
+			if isGRPCSkippable(err) {
+				log.Warn().Err(err).Msg("could not list AlloyDB instances")
+				return nil, nil
+			}
 			return nil, err
 		}
 
@@ -437,6 +446,10 @@ func (g *mqlGcpProjectAlloydbServiceCluster) backups() ([]any, error) {
 			break
 		}
 		if err != nil {
+			if isGRPCSkippable(err) {
+				log.Warn().Err(err).Msg("could not list AlloyDB backups")
+				return nil, nil
+			}
 			return nil, err
 		}