doc/worker.md: explain default creds

Change-Id: I425d3190d0a3b0c39901a4235a9021614d85ffda
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/379140
Trust: Jonathan Amsterdam <jba@google.com>
Run-TryBot: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
diff --git a/doc/worker.md b/doc/worker.md
index 8570896..f24013a 100644
--- a/doc/worker.md
+++ b/doc/worker.md
@@ -9,6 +9,14 @@
 The CLI can display Firestore database of CVE records, update the database from
 commits of the CVE repo github.com/CVEProject/cvelist, and file issues.
 
+## Setup
+
+You will need a Google Cloud account and a project to run the worker. If you
+don't already have default credentials on your machine, set them up with
+```
+gcloud auth application-default login
+```
+
 To run most CLI commands you'll need a `-project` flag, to specify the GCP
 project where the Firestore DB resides. Since there is only one Firestore DB per
 project and we want multiple, independent DBs, we also require a string called the