Bump dependencies & go version to resolve #465

[andrewesweet]

A relatively straightforward bumping of dependencies (in particular google.golang.org/api) resolved #465. The quota project set in the Application Default Credential remains unrespected, but the environment variable is now respected so the data sources are usable as a non-service-account user.

Bumping google.golang.org/api to the latest version in turn bumped golang.org/x/oauth2 which lead to errors when building with go 1.16:

internal\provider\provider.go:17:2: //go:build comment without // +build comment
go\pkg\mod\golang.org\x\[email protected]\oauth2.go:21:2: //go:build comment without // +build comment

I resolved this by bumping the go version to 1.19. Why that version? Arbitrarily because that is what is presently used by the google provider.

Unfortunately, I lack the dependencies needed to run a full regression test of the provider, so I am at the maintainers' mercy to support that.