Move to zambda role based token usage

[alexwillingham]

Instead of having to manage M2M clients in all of our zambdas, we can use the zambda service feature. This also puts us on a path to tightening the permissions of roles used by each zambda function.