update all APIs

Like documented in the README

```
rm -f .api.deps .cli.deps && FETCH_APIS=1 make update-json -j8
```

etc/api/servicecontrol/v2/servicecontrol-api.json

@@ -169,7 +169,7 @@
             }
         }
     },
-    "revision": "20230106",
+    "revision": "20240223",
     "rootUrl": "https://servicecontrol.googleapis.com/",
     "schemas": {
         "Api": {
@@ -318,6 +318,7 @@
                         "description": "Properties of the object. Contains field @type with type URL.",
                         "type": "any"
                     },
+                    "deprecated": true,
                     "description": "Deprecated. Use the `metadata` field instead. Other service-specific data about the request, response, and other activities.",
                     "type": "object"
                 },
@@ -396,6 +397,10 @@
                     "description": "The name of the service account key used to create or exchange credentials for authenticating the service account making the request. This is a scheme-less URI full resource name. For example: \"//iam.googleapis.com/projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}/keys/{key}\"",
                     "type": "string"
                 },
+                "serviceDelegationHistory": {
+                    "$ref": "ServiceDelegationHistory",
+                    "description": "Records the history of delegated resource access across Google services."
+                },
                 "thirdPartyPrincipal": {
                     "additionalProperties": {
                         "description": "Properties of the object.",
@@ -587,7 +592,7 @@
             "type": "object"
         },
         "ReportResponse": {
-            "description": "Response message for the Report method. If the request contains any invalid data, the server returns an RPC error.",
+            "description": "Response message for the Report method.",
             "id": "ReportResponse",
             "properties": {},
             "type": "object"
@@ -687,7 +692,7 @@
                     "additionalProperties": {
                         "type": "string"
                     },
-                    "description": "Annotations is an unstructured key-value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: https://kubernetes.io/docs/user-guide/annotations",
+                    "description": "Annotations is an unstructured key-value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/",
                     "type": "object"
                 },
                 "createTime": {
@@ -748,11 +753,11 @@
             "id": "ResourceInfo",
             "properties": {
                 "container": {
-                    "description": "Optional. The identifier of the container of this resource. For Google Cloud APIs, the resource container must be one of the following formats: - `projects/` - `folders/` - `organizations/` For the policy enforcement on the container level (VPCSC and Location Policy check), this field takes precedence on the container extracted from name when presents.",
+                    "description": "Optional. The identifier of the container of this resource. For Google Cloud APIs, the resource container must be one of the following formats: - `projects/` - `folders/` - `organizations/` Required for the policy enforcement on the container level (e.g. VPCSC, Location Policy check, Org Policy check).",
                     "type": "string"
                 },
                 "location": {
-                    "description": "Optional. The location of the resource. The value must be a valid zone, region or multiregion. For example: \"europe-west4\" or \"northamerica-northeast1-a\"",
+                    "description": "Optional. The location of the resource, it must be a valid zone, region or multiregion, for example: \"europe-west4\", \"northamerica-northeast1-a\". Required for location policy check.",
                     "type": "string"
                 },
                 "name": {
@@ -844,6 +849,47 @@
             },
             "type": "object"
         },
+        "ServiceDelegationHistory": {
+            "description": "The history of delegation across multiple services as the result of the original user's action. Such as \"service A uses its own account to do something for user B\". This differs from ServiceAccountDelegationInfo, which only tracks the history of direct token exchanges (impersonation).",
+            "id": "ServiceDelegationHistory",
+            "properties": {
+                "originalPrincipal": {
+                    "description": "The original end user who initiated the request to GCP.",
+                    "type": "string"
+                },
+                "serviceMetadata": {
+                    "description": "Data identifying the service specific jobs or units of work that were involved in a chain of service calls.",
+                    "items": {
+                        "$ref": "ServiceMetadata"
+                    },
+                    "type": "array"
+                }
+            },
+            "type": "object"
+        },
+        "ServiceMetadata": {
+            "description": "Metadata describing the service and additional service specific information used to identify the job or unit of work at hand.",
+            "id": "ServiceMetadata",
+            "properties": {
+                "jobMetadata": {
+                    "additionalProperties": {
+                        "description": "Properties of the object.",
+                        "type": "any"
+                    },
+                    "description": "Additional metadata provided by service teams to describe service specific job information that was triggered by the original principal.",
+                    "type": "object"
+                },
+                "principalSubject": {
+                    "description": "A string representing the principal_subject associated with the identity. For most identities, the format will be `principal://iam.googleapis.com/{identity pool name}/subject/{subject)` except for some GKE identities (GKE_WORKLOAD, FREEFORM, GKE_HUB_WORKLOAD) that are still in the legacy format `serviceAccount:{identity pool name}[{subject}]` If the identity is a Google account (e.g. workspace user account or service account), this will be the email of the prefixed by `serviceAccount:`. For example: `serviceAccount:my-service-account@project-1.iam.gserviceaccount.com`. If the identity is an individual user, the identity will be formatted as: `user:user_ABC@email.com`.",
+                    "type": "string"
+                },
+                "serviceDomain": {
+                    "description": "The service's fully qualified domain name, e.g. \"dataproc.googleapis.com\".",
+                    "type": "string"
+                }
+            },
+            "type": "object"
+        },
         "SpanContext": {
             "description": "The context of a span. This is attached to an Exemplar in Distribution values during aggregation. It contains the name of a span with format: projects/[PROJECT_ID_OR_NUMBER]/traces/[TRACE_ID]/spans/[SPAN_ID]",
             "id": "SpanContext",