chore: update OpenTofu AWS credentials action patch

[xnoto]

Summary

• Update both aws-actions/configure-aws-credentials references in .github/workflows/opentofu.yml (plan and apply) from v6.2.3 (e6de054238d6b7531b4efff3b6587d9aade6a06c) to v6.2.4 (cbe3b392738ccf3f987d68400dafcf4b0624a56c). Both upstream tag-to-commit mappings were independently verified.
• Keep the reusable workflow public interface, check names, permissions, credential conditions, and environment-gated push-to-main apply trigger unchanged. Exact comparison confirms only the two action references and version comments changed.
• Use the conservative patch release for this Bedrock cleanup prerequisite. Hold v6.3.0, which introduces the translate-env-variables option, outside this patch-only scope. Other repository hook and external action pins were rechecked and are current.

Compatibility and ownership

v6.2.4 release notes describe account-ID handling, proxy log masking, and final-retry backoff fixes. The v6.2.3...v6.2.4 comparison does not change action.yml.

This patch does not require a new runner runtime or image. Runner image publication and adoption remain separate owner work requiring later approval; this PR does not switch consumers to a new image.

Validation

• pre-commit run --all-files --show-diff-on-failure --color=never — passed, including pinned actionlint and redacted Gitleaks. Broken-symlink check skipped because there were no applicable files.
• git diff --check — passed.
• Exact two-substitution comparison against refreshed origin/main — passed.
• Reconfirmed main at 50c4cc62a7ee0e58eefba091c855c0ac4f1ffa27 immediately before committing.

Prepared in an isolated feature worktree. Normal CI should run automatically for this draft PR; no manual dispatch or rerun was performed.

[github-actions]

Shared Workflows CI

Shared workflows CI passed.

View the workflow run.

View run output

[INFO] Initializing environment for https://github.com/pre-commit/pre-commit-hooks.
[INFO] Initializing environment for https://github.com/gitleaks/gitleaks.
[INFO] Initializing environment for https://github.com/rhysd/actionlint.
[INFO] Installing environment for https://github.com/pre-commit/pre-commit-hooks.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/gitleaks/gitleaks.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/rhysd/actionlint.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
check for case conflicts.................................................Passed
check for merge conflicts................................................Passed
check for broken symlinks............................(no files to check)Skipped
check vcs permalinks.....................................................Passed
detect destroyed symlinks................................................Passed
detect private key.......................................................Passed
mixed line ending........................................................Passed
trim trailing whitespace.................................................Passed
Detect hardcoded secrets.................................................Passed
Lint GitHub Actions workflow files.......................................Passed