Merge 59652133d5 into 2aacf4f67b

Bumps [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) from 2.262.2 to 2.263.0.
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.263.0/packages/aws-cdk-lib)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.263.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/dependabot.yml

@@ -4,8 +4,6 @@ updates:
     directory: /
     schedule:
       interval: weekly
-    commit-message:
-      prefix: "chore(deps)"
     assignees:
       - amoussa1229
     ignore:
@@ -21,8 +19,6 @@ updates:
     directory: /
     schedule:
       interval: weekly
-    commit-message:
-      prefix: "chore(deps)"
     assignees:
       - amoussa1229
 
@@ -30,7 +26,5 @@ updates:
     directory: /lambda/backup-verification
     schedule:
       interval: weekly
-    commit-message:
-      prefix: "chore(deps)"
     assignees:
       - amoussa1229

.github/workflows/ci.yaml

@@ -8,7 +8,7 @@ permissions:
 
 jobs:
   ci:
-    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
+    uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@3f746774229d41770727e2e4fd63ed5f5555a8b3 # v1.0.3
     with:
       node-version: "24"
       enable-qemu: true

.github/workflows/dependency-review.yml

@@ -7,4 +7,4 @@ permissions:
 
 jobs:
   review:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@3f746774229d41770727e2e4fd63ed5f5555a8b3 # v1.0.3

.github/workflows/deploy.yaml

@@ -13,7 +13,7 @@ concurrency:
 
 jobs:
   deploy:
-    uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
+    uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@3f746774229d41770727e2e4fd63ed5f5555a8b3 # v1.0.3
     with:
       node-version: "24"
       enable-qemu: true

.github/workflows/policy.yaml

@@ -1,22 +0,0 @@
-name: PR Policy
-
-on:
-  pull_request:
-    types: [opened, reopened, synchronize, edited, labeled, unlabeled, ready_for_review]
-
-concurrency:
-  group: "policy-${{ github.event.pull_request.number }}"
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-  issues: read
-  pull-requests: read
-
-jobs:
-  policy:
-    uses: Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml@7ac3528750b346f181347bb09f6af927a1c0aa14 # v1.0.6
-    secrets:
-      JIRA_CLOUD_ID: ${{ secrets.JIRA_CLOUD_ID }}
-      JIRA_SERVICE_ACCOUNT_EMAIL: ${{ secrets.JIRA_SERVICE_ACCOUNT_EMAIL }}
-      JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}

AGENTS.md

@@ -1,33 +0,0 @@
-# Sea Haven Org Governance
-
-> Full engineering standards: [engineering-handbook](https://github.com/Sea-Haven-Industries/engineering-handbook).
-
-## Branching and PRs
-
-- Branch prefixes: `feature/`, `fix/`, `hotfix/`, `chore/`, `docs/`, `refactor/`, `release/`
-- PR titles: `type(scope): description (DEV-123)` — Jira key required (DEV/PLAT/SEC)
-- PR body sections (exact order): **Summary**, **Validation**, **Tests**, **Notes**
-- Route work: DEV (product), PLAT (infra/platform), SEC (security)
-
-## Commits
-
-- Conventional Commits: `type(scope): description`
-- Allowed types: `feat fix docs style refactor perf test build ci chore revert release`
-- No AI-attribution footers
-
-## Secrets and Security
-
-- Secrets in AWS Secrets Manager only — never in code, env vars, logs, or commits
-- Non-secret config in SSM Parameter Store
-- IAM/IaC/payment/auth changes require security review
-
-## CI and SHA Pins
-
-Pin every GitHub Actions ref to a full commit SHA with an inline version comment:
-
-```yaml
-uses: actions/checkout@abc123def456 # v4.1.0
-```
-
-The deterministic global pre-push security hook must not be bypassed (`--no-verify` requires
-explicit approval). Linting stays in CI; do not gate on it locally.