feat: scaffold the aws config-tenant (CI, release, signed manifests artifact)

[devantler]

🤖 Generated by the Daily AI Assistant

Why

The devantler-tech/aws config-tenant repo was created but empty, blocking the AWS auth chain that gates EKS work in KSail (ksail#4328) and the platform's aws-tenant wiring.

What

Seeds the standard config-tenant scaffold: PR kustomize validation, semantic-release, and a cosign-signed oci://ghcr.io/devantler-tech/aws/manifests artifact on release — mirroring the proven .github/github-config tenant pattern. First release after merge lets the platform point its aws-tenant OCIRepository at the artifact.

Part of devantler-tech/platform#2325.

Note: the repo's default branch still points at the scaffold branch (GitHub auto-set on first push) — flip it to main when promoting, or let the declarative Repository CR reconcile it.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: dd35efa3-8aef-400f-9584-99f779c9022a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}