fix(aws-cdk): Fix IRSA service account name to match Helm chart

The Helm chart names the SA `<release>-service-account`, not
`clp-s3-access`. Update OIDC condition to use `clp-service-account`.

Author: junhaoliao

tools/deployment/aws-cdk/lib/clp-stack.ts

@@ -30,7 +30,7 @@ export class ClpStack extends cdk.Stack {
 
     const conditionKey = new cdk.CfnJson(this, "OidcConditionKey", {
       value: {
-        [`${oidcIssuer}:sub`]: "system:serviceaccount:clp:clp-s3-access",
+        [`${oidcIssuer}:sub`]: "system:serviceaccount:clp:clp-service-account",
         [`${oidcIssuer}:aud`]: "sts.amazonaws.com",
       },
     });