Finally, I explicitly added these roles to the default service account ([email protected]) and now it remembers through deployments.

Cloud Datastore Owner
Eventarc Event Receiver
Firebase Admin
Firebase Admin SDK Administrator Service Agent
Firebase Authentication Admin
Storage Admin