chore: tag the access-log bucket (#1)

* chore: tag the access-log bucket

Trivial resource change to exercise the CI deploy pipeline end-to-end
(OIDC deploy role + dedicated sh-openswe-traces-cfn-exec-role).

* chore: gitignore .env (CI conventions check)

.gitignore

@@ -1,5 +1,7 @@
 .aws-sam/
 samconfig.toml
+.env
+.env.*
 *.pyc
 __pycache__/
 .DS_Store

template.yaml

@@ -135,6 +135,11 @@ Resources:
           - Id: expire-access-logs
             Status: Enabled
             ExpirationInDays: 365
+      Tags:
+        - Key: project
+          Value: sh-openswe-traces
+        - Key: role
+          Value: s3-access-logs
 
   TracesLogBucketPolicy:
     Type: AWS::S3::BucketPolicy