Creates a new cloud provider connection. Exactly one of gcpConfig or awsConfig must be supplied.
Returns 400 invalid_connection_config when both or neither are present.

When collaborators lists no owner, the caller is added as the owner (or promoted to owner when
already listed), so a connection created without collaborators stays manageable by its creator.