### Description

**Background**
As part of https://github.com/elastic/kibana/issues/104986 we will be adding the ability for Elastic Agents to send agent monitoring data to a remote Elasticsearch cluster. In order to achieve this, we will need a service token for the remote cluster which fleet server will use. 

This service account will need less permissions than the `elastic/fleet-server` as integration data will not be sent to remote clusters yet.

**Service Account Details**

Name: `elastic/fleet-server-remote`

Permissions:
-  for indices `logs-*`, `metrics-*` privileges "write", "create_index", "auto_configure"

x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authc/service/ServiceAccountServiceTests.java
"token1",
                new SecureString("super-secret-value".toCharArray())
            ),
            nodeName,
            future5
        );
        assertThat(
            future5.get(),
            equalTo(
                Authentication.newServiceAccountAuthentication(
                    new User(
                        "elastic/fleet-server",
                        Strings.EMPTY_ARRAY,
                        "Service account - elastic/fleet-server",
                        null,
                        Map.of("_elastic_service_account", true),
                        true
                    ),
                    nodeName,
                    Map.of("_token_name", "token1", "_token_source", authenticatingStore.getTokenSource().name().toLowerCase(Locale.ROOT))
                )
            )
        );
    }
    public void testAuthenticateWithToken() throws ExecutionException, InterruptedException, IllegalAccessException {
        final Logger sasLogger = LogManager.getLogger(ServiceAccountService.class);
        Loggers.setLevel(sasLogger, Level.TRACE);
        final MockLogAppender appender = new MockLogAppender();
        Loggers.addAppender(sasLogger, appender);
        appender.start();