fix: SQS filter S3 Object key in body TDE-1876 (#1181)

### Motivation

Currently, the SQS subscription from the S3 bucket events uses
`filterPolicy`, which only filters based on message attributes.
However, S3 event notifications do **not include the object key as a
message attribute** — the key is only present in the JSON message body.
As a result, all messages are being filtered out (see
`NumberOfNotificationsFilteredOut-NoMessageAttributes` metrics),
preventing the SQS queue from receiving any messages.

To solve this, we need to filter messages based on the object key inside
the message body rather than expecting message attributes.
<!-- TODO: Say why you made your changes. -->

### Modifications

- use `filterPolicyWithMessageBody` instead of `filterPolicy`.
<!-- TODO: Say what changes you made. -->

<!-- TODO: Attach screenshots if you changed the UI. -->

### Verification

<img width="1400" height="319" alt="image"
src="https://github.com/user-attachments/assets/47491e2a-21d5-4da7-a066-fdf91a876af4"
/>


<!-- TODO: Say how you tested your changes. -->

Author: paulfouquet

infra/eks/sqs/bucket.events.queue.construct.ts

@@ -1,5 +1,5 @@
 import { Duration } from 'aws-cdk-lib';
-import { SubscriptionFilter, Topic } from 'aws-cdk-lib/aws-sns';
+import { FilterOrPolicy, SubscriptionFilter, Topic } from 'aws-cdk-lib/aws-sns';
 import { SqsSubscription } from 'aws-cdk-lib/aws-sns-subscriptions';
 import { Queue } from 'aws-cdk-lib/aws-sqs';
 import { Construct } from 'constructs';
@@ -33,7 +33,15 @@ export class BucketEventsQueue extends Construct {
 
       topic.addSubscription(
         new SqsSubscription(this.queue, {
-          filterPolicy: { key: source.filter },
+          filterPolicyWithMessageBody: {
+            Records: FilterOrPolicy.policy({
+              s3: FilterOrPolicy.policy({
+                object: FilterOrPolicy.policy({
+                  key: FilterOrPolicy.filter(source.filter),
+                }),
+              }),
+            }),
+          },
         }),
       );
     }