One SSRF bug in a URL fetcher can reach the cloud metadata endpoint, steal IAM role credentials, and end in full account takeover. Here is the chain, and how to break it.