Checking…

Wire this into a Cloud Scheduler HTTP job that POSTs to /admin/api/billing/sync with header X-Scheduler-Secret: <the secret>, every hour. Each tenant is synced once a day at its own random moment: the gateway draws a minute of the day per tenant and runs that tenant on the first hourly call after it, so the scheduler's frequency only sets how precise that moment is. Example:

gcloud scheduler jobs create http billing-sync \
  --schedule="0 * * * *" \
  --uri="https://YOUR-DOMAIN/admin/api/billing/sync" \
  --http-method=POST \
  --headers="X-Scheduler-Secret=YOUR_SECRET" \
  --message-body="force=false"