* feat(iam): move seahaven-site exec roles into their own stack (PLAT-225) Drop the retained roles from the substrate template so the new stack can import them without a second owner. * fix(iam): address review feedback
