Ridgefield deploys separate telemetry-ingestion and reporting services. Ingestion may write raw events; reporting may read approved aggregates only. Which identity design is appropriate?

1. One shared Owner credential embedded in both container images.
2. Distinct service identities with narrowly scoped grants for each workload.
3. A prompt instructing both services not to exceed their intended duties.
4. Project-wide editor access for all users so deployment is simpler.