refactor(ci): split aws-tests.yml into per-domain workflow files

Split the monolithic aws-tests.yml (441 lines) into 5 focused files
following the terragrunt repo's pattern of granular workflows:

- terraform-tests.yml: terraform module tests (tf/tofu matrix)
- aws-integration-tests.yml: AWS integration tests (test/ with -tags aws)
- terragrunt-tests.yml: terragrunt module tests (tf/tofu matrix)
- k8s-tests.yml: kubernetes + helm tests (shared minikube dependency)
- build-and-release.yml: cross-compile builds + release upload

Job definitions are unchanged — only reorganized into separate files.
Release job keeps needs: build only, since test jobs are skipped on
release events and tests already gate via push/PR triggers.

Author: james00012

.github/workflows/aws-integration-tests.yml

@@ -0,0 +1,62 @@
+name: AWS Integration Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  aws-integration-tests:
+    name: AWS Integration Tests
+    if: >-
+      github.event_name != 'pull_request' ||
+      github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install mise
+        uses: jdx/mise-action@v3
+        with:
+          version: 2025.12.10
+          experimental: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Go module cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/go/pkg/mod
+            ~/.cache/go-build
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+
+      - name: Download Go modules
+        run: go mod download
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: arn:aws:iam::087285199408:role/terratest-gha
+          aws-region: us-east-1
+
+      - name: Run AWS integration tests
+        run: |
+          mkdir -p /tmp/logs
+          go test -v -p 1 -tags aws -count=1 -timeout 45m ./test/... 2>&1 | tee /tmp/logs/test_output.log
+
+      - name: Upload test logs
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: aws-integration-test-logs
+          path: /tmp/logs/
+          retention-days: 14