feat: add shared IAM policies for GitHub Actions assume role

[bentoluizv]

No description provided.

[github-actions]

Terraform Plan (shared)

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

[github-actions]

Terraform Plan (dev)

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # module.lambda.aws_lambda_function.api_function will be updated in-place
  ~ resource "aws_lambda_function" "api_function" {
        id                             = "tech-floripa-certificates-api-dev"
      ~ image_uri                      = "334318883918.dkr.ecr.us-east-1.amazonaws.com/tech-floripa-certificates-notification-dev:latest" -> "334318883918.dkr.ecr.us-east-1.amazonaws.com/tech-floripa-certificates-api-dev@sha256:04b9ce1ea6458d19f20aab0ab59236de6506e4c420dc27fc4ce0dd292c032cc8"
      ~ last_modified                  = "2025-12-01T00:04:54.000+0000" -> (known after apply)
        tags                           = {
            "Environment" = "dev"
            "Name"        = "tech-floripa-certificates-api-dev"
            "Project"     = "tech-floripa-certificates"
        }
        # (28 unchanged attributes hidden)

        # (4 unchanged blocks hidden)
    }

  # module.lambda.aws_lambda_function.builder_function will be updated in-place
  ~ resource "aws_lambda_function" "builder_function" {
        id                             = "tech-floripa-certificates-builder-dev"
      ~ image_uri                      = "334318883918.dkr.ecr.us-east-1.amazonaws.com/tech-floripa-certificates-builder-dev@sha256:d9813a2c1d99b5daf6b52a9528143fc97d799d88bf159aa335ae51766368fc1a" -> "334318883918.dkr.ecr.us-east-1.amazonaws.com/tech-floripa-certificates-builder-dev@sha256:3a3028c807b5932c5a34d48bd3c5110977561071d8ed90a7cd4e58811605abee"
      ~ last_modified                  = "2025-11-30T23:55:21.328+0000" -> (known after apply)
        tags                           = {
            "Environment" = "dev"
            "Name"        = "tech-floripa-certificates-builder-dev"
            "Project"     = "tech-floripa-certificates"
        }
        # (28 unchanged attributes hidden)

        # (4 unchanged blocks hidden)
    }

  # module.lambda.aws_lambda_function.notification_function will be updated in-place
  ~ resource "aws_lambda_function" "notification_function" {
        id                             = "tech-floripa-certificates-notification-dev"
      ~ image_uri                      = "334318883918.dkr.ecr.us-east-1.amazonaws.com/tech-floripa-certificates-notification-dev@sha256:9e1520acdc60f3cbe71c41d2cb7d16fc601f6292172041dec87d3ebd5faf023f" -> "334318883918.dkr.ecr.us-east-1.amazonaws.com/tech-floripa-certificates-notification-dev@sha256:3925e4acb3af5532e0e188dac7280bff7328cae0d25b302a6ab215fa9d27fa3a"
      ~ last_modified                  = "2025-11-30T23:55:48.893+0000" -> (known after apply)
        tags                           = {
            "Environment" = "dev"
            "Name"        = "tech-floripa-certificates-notification-dev"
            "Project"     = "tech-floripa-certificates"
        }
        # (28 unchanged attributes hidden)

        # (4 unchanged blocks hidden)
    }

Plan: 0 to add, 3 to change, 0 to destroy.