feat(P4): Nova rebrand — AWS resource migration (REQ-163)

Rename all acdl-* AWS resources → nova-* across terraform (DynamoDB,
Secrets Manager, Lambda, SNS, SG, KMS alias, ECS, ECR, IAM user/policy,
state bucket, ALB, VPC/subnet names). Lambda default table names → nova-*
(D-111). State bucket backend → nova-tfstate (-migrate-state documented).
New docs/NOVA_AWS_MIGRATION.md runbook (staged migration + rollback).
New scripts/migrate_dynamodb_data.py (scan+copy, dry-run default).
acdl-deploy- → nova-deploy- role ARN in deploy workflows. Test fixtures
updated; terraform validate + pytest + run_ci.sh PASS.

---ci---
project: acdl
phase: 4
milestone: v1.15
status: execute
---/ci---

terraform/microservice/main.tf

@@ -1,7 +1,7 @@
 resource "aws_vpc" "vpc-vpc" {
   cidr_block = "10.0.0.0/16"
   tags = {
-    Name = "acdl-microservice"
+    Name = "nova-microservice"
   }
 }
 
@@ -11,9 +11,9 @@ output "vpc_id" {
 
 resource "aws_subnet" "vpc-subnet" {
   cidr_block = "10.0.0.0/16"
-  vpc_id = aws_vpc.vpc-vpc.id
+  vpc_id     = aws_vpc.vpc-vpc.id
   tags = {
-    Name = "acdl-microservice"
+    Name = "nova-microservice"
   }
 }
 
@@ -24,12 +24,12 @@ resource "aws_route_table" "vpc-routetable" {
     gateway_id = aws_internet_gateway.vpc-igw.id
   }
   tags = {
-    Name = "acdl-microservice-rt"
+    Name = "nova-microservice-rt"
   }
 }
 
 resource "aws_ecs_cluster" "cluster" {
-  name = "acdl-microservice"
+  name = "nova-microservice"
 }
 
 output "cluster_arn" {
@@ -41,7 +41,7 @@ output "cluster_id" {
 }
 
 resource "aws_ecr_repository" "ecr" {
-  name = "acdl-microservice"
+  name = "nova-microservice"
 }
 
 output "repository_url" {
@@ -53,8 +53,8 @@ output "repository_arn" {
 }
 
 resource "aws_iam_role" "roles" {
-  name = "acdl-microservice-exec"
-  assume_role_policy = jsonencode({"Statement": [{"Action": "sts:AssumeRole", "Effect": "Allow", "Principal": {"Service": "ecs-tasks.amazonaws.com"}}], "Version": "2012-10-17"})
+  name                = "nova-microservice-exec"
+  assume_role_policy  = jsonencode({ "Statement" : [{ "Action" : "sts:AssumeRole", "Effect" : "Allow", "Principal" : { "Service" : "ecs-tasks.amazonaws.com" } }], "Version" : "2012-10-17" })
   managed_policy_arns = ["arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"]
 }
 
@@ -67,9 +67,9 @@ output "role_id" {
 }
 
 resource "aws_lb" "alb-loadbalancer" {
-  name = "acdl-microservice"
-  subnets = [aws_subnet.vpc-subnet.id]
-  security_groups = [aws_iam_role.roles.arn]
+  name               = "nova-microservice"
+  subnets            = [aws_subnet.vpc-subnet.id]
+  security_groups    = [aws_iam_role.roles.arn]
   load_balancer_type = "application"
 }
 
@@ -78,11 +78,11 @@ output "lb_arn" {
 }
 
 resource "aws_lb_target_group" "alb-targetgroup" {
-  name = "acdl-microservice"
-  port = 8080
+  name        = "nova-microservice"
+  port        = 8080
   target_type = "ip"
-  vpc_id = aws_vpc.vpc-vpc.id
-  protocol = "HTTP"
+  vpc_id      = aws_vpc.vpc-vpc.id
+  protocol    = "HTTP"
 }
 
 output "target_group_arn" {
@@ -92,7 +92,7 @@ output "target_group_arn" {
 resource "aws_lb_listener" "alb-listener" {
   port = 8080
   default_action {
-    type = "forward"
+    type             = "forward"
     target_group_arn = aws_lb_target_group.alb-targetgroup.arn
   }
   load_balancer_arn = aws_lb.alb-loadbalancer.id
@@ -103,10 +103,10 @@ output "listener_arn" {
 }
 
 resource "aws_ecs_task_definition" "service-taskdefinition" {
-  cpu = 256
-  memory = 512
-  container_definitions = jsonencode([{"essential": true, "image": "581513795199.dkr.ecr.us-east-1.amazonaws.com/acdl-microservice:latest", "name": "app", "portMappings": [{"containerPort": 8080}]}])
-  family = "app"
+  cpu                   = 256
+  memory                = 512
+  container_definitions = jsonencode([{ "essential" : true, "image" : "581513795199.dkr.ecr.us-east-1.amazonaws.com/nova-microservice:latest", "name" : "app", "portMappings" : [{ "containerPort" : 8080 }] }])
+  family                = "app"
 }
 
 output "task_def_arn" {
@@ -117,17 +117,17 @@ resource "aws_ecs_service" "service-service" {
   cluster = aws_ecs_cluster.cluster.arn
   load_balancer {
     target_group_arn = aws_lb_target_group.alb-targetgroup.arn
-    container_name = "app"
-    container_port = 8080
+    container_name   = "app"
+    container_port   = 8080
   }
   network_configuration {
-    subnets = [aws_subnet.vpc-subnet.id]
+    subnets         = [aws_subnet.vpc-subnet.id]
     security_groups = [aws_iam_role.roles.arn]
   }
-  desired_count = 1
-  launch_type = "FARGATE"
+  desired_count   = 1
+  launch_type     = "FARGATE"
   task_definition = aws_ecs_task_definition.service-taskdefinition.arn
-  name = "acdl-microservice"
+  name            = "nova-microservice"
 }
 
 output "service_arn" {
@@ -137,11 +137,11 @@ output "service_arn" {
 resource "aws_internet_gateway" "vpc-igw" {
   vpc_id = aws_vpc.vpc-vpc.id
   tags = {
-    Name = "acdl-microservice-igw"
+    Name = "nova-microservice-igw"
   }
 }
 
 resource "aws_route_table_association" "vpc-rta" {
-  subnet_id = aws_subnet.vpc-subnet.id
+  subnet_id      = aws_subnet.vpc-subnet.id
   route_table_id = aws_route_table.vpc-routetable.id
-}
+}

terraform/microservice/terraform.tf

@@ -7,7 +7,7 @@ terraform {
     }
   }
   backend "s3" {
-    bucket = "acdl-tfstate-581513795199-us-east-1"
+    bucket = "nova-tfstate-581513795199-us-east-1"
     key    = "spike/microservice/terraform.tfstate"
     region = "us-east-1"
   }