I think you are missing a "Download secure file" task, that would download the missing service account key to the agent directory, since you need it in the last step. add it between steps 19 and 20.