data-engineer (tenant accounts): Implement Terraform (adapt from #227 module)

[jordanpadams]

Summary

Adapt the reusable Terraform module from #227 to deploy the Tenant Data Engineer role in each tenant (node) production account.

Tasks

• Adapt PDC Role Definitions: Redesign en-platform-engineer Role in CDS-Test and CDS-Prod (SCIP Architecture) #227 Terraform module for tenant account deployment (parameterized by node/account)
• Include per-node OpenSearch index permission scoping
• Validate Terraform plan
• Code review with team

Dependencies

Blocked by #227 TF module completion, #234 completion, and permissions identification for this theme.

Parent Theme

Part of #235