Allow OIDC for Github Actions to ECR

[davidread]

No description provided.

[sablumiah]

Terraform Plan Summary

Terraform Plan: 10 to be created, 0 to be destroyed, 0 to be updated, 0 to be replaced and 24 unchanged.

Resources to create:

+ module.ecr_credentials.aws_iam_role.github[0]
+ module.ecr_credentials.aws_iam_role_policy_attachment.github_ecr[0]
+ module.ecr_credentials.github_actions_secret.ecr_registry_url["cfe-civil-cicd-poc"]
+ module.ecr_credentials.github_actions_secret.ecr_registry_url["laa-check-client-qualifies"]
+ module.ecr_credentials.github_actions_secret.ecr_role_to_assume["cfe-civil-cicd-poc"]
+ module.ecr_credentials.github_actions_secret.ecr_role_to_assume["laa-check-client-qualifies"]
+ module.ecr_credentials.github_actions_variable.ecr_region["cfe-civil-cicd-poc"]
+ module.ecr_credentials.github_actions_variable.ecr_region["laa-check-client-qualifies"]
+ module.ecr_credentials.github_actions_variable.ecr_repository["cfe-civil-cicd-poc"]
+ module.ecr_credentials.github_actions_variable.ecr_repository["laa-check-client-qualifies"]

[sablumiah]

This PR CANNOT be auto approved and requires manual approval from the Cloud Platform team.
Reason:
🕵️‍♂️ Manual review required: OPA policy checks did not pass.
Please raise it in #ask-cloud-platform Slack channel.