* chore: update secret manager in kokoro

* 🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

---------

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>

#1353)

* test: test universe domain client only in prod

* unflake hmac snippet test

Source-Link: googleapis/synthtool@71a7297
Post-Processor: gcr.io/cloud-devrel-public-resources/owlbot-python:latest@sha256:e8dcfd7cbfd8beac3a3ff8d3f3185287ea0625d859168cc80faccfc9a7a00455

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>
Co-authored-by: cojenco <[email protected]>

Co-authored-by: Holt Skinner <[email protected]>
Co-authored-by: cojenco <[email protected]>

* chore(deps): update all dependencies

* 🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

---------

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>

…nloading using transfer_manager (#1357)

* fix: do not spam the log with checksum related INFO messages when downloading using transfer_manager

`download_chunks_concurrently` function does not allow to set `checksum` field in `download_kwargs`. It also does not set it on its own so it takes the default value of `"md5"` (see `Blob._prep_and_do_download`). Because ranged downloads do not return checksums it results in a lot of INFO messages (tens/hundreds):
```
INFO google.resumable_media._helpers - No MD5 checksum was returned from the service while downloading ...
(which happens for composite objects), so client-side content integrity checking is not being performed.
```
To fix it set the `checksum` field to `None` which means no checksum checking for individual chunks. Note that `transfer_manager` has its own checksum checking logic (enabled by `crc32c_checksum` argument)

* fix tests

* feat: add support for restore token

* add unit tests coverage

* update docstrings

* fix docs

…1373)

This reverts commit 06ed15b.

* feat: IAM signBlob retries

* support universe domain and update tests

* update test credentials

* use ud signing bucket fixture

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>