Unify RoleDescriptor from get_service_account and create_api_key

[swallez]

In #1723 we updated security.create_api_key.RoleDescriptor so that it matches security.get_service_account.RoleDescriptor. These types are actually a single type and should be merged.

This is a breaking change since this means renaming that single type to security._types.RoleDescriptor.