A developer's $17,000 bill exposes critical Google Cloud security gaps, including API keys usable 23 minutes after deletion.