E5. AWS parity v1 + deploy

[roktiw]

Implement 'modules/product-space-aws'.
Minimum: S3 (hosting), CloudFront (TLS), Route53 (optional), CloudWatch.
Security: IAM OIDC for deploy.
DoD: Docs workload deploys to AWS.