Constant MC_DEFAULT_SERVICE_ACCOUNT_NAME 

pub const MC_DEFAULT_SERVICE_ACCOUNT_NAME: &str = "bindy-scout-remote";

Default ServiceAccount name created by bootstrap mc on the queen-ship cluster.

Each child cluster gets its own SA so access can be revoked independently. The local in-cluster scout SA is named SCOUT_SERVICE_ACCOUNT_NAME (bindy-scout); the remote SA uses this distinct name to avoid confusion.