Keep only build-push-ghcr.yml for our Docker image builds.

Multi-platform Docker build (amd64/arm64) triggered on push to main
and manual dispatch.

#5)

Generate reproducible resource IDs from md5(name) so that connection
and API destination ARNs are predictable across container restarts.
This enables hardcoded ARNs in init scripts for local development.

Also fix mutable default bug in Connection and ApiDestination dataclasses
where the id field was evaluated once at class definition time, causing
all instances to share the same UUID.

Bumps the cargo group with 1 update in the /tests/aws/services/lambda_/functions/rust-lambda directory: [tokio](https://github.com/tokio-rs/tokio).


Updates `tokio` from 1.18.5 to 1.26.0
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](tokio-rs/tokio@tokio-1.18.5...tokio-1.26.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-version: 1.26.0
  dependency-type: direct:production
  dependency-group: cargo
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Implement AWS EventBridge Pipes support with sources (SQS, Kinesis,
DynamoDB Streams) and targets (SQS, Kinesis, API Destinations).

Key components:
- PipesProvider with all 10 API handlers (CRUD, start/stop, tagging)
- PipeWorker poll loop reusing existing ESM pollers (1s default interval,
  configurable via PIPES_POLL_INTERVAL_SEC)
- PipeEventProcessor with base64 data decoding matching AWS Pipes behavior
- InputTemplate support with jsonpath and aws.pipes.* placeholders
- API destination target with connection auth via SecretsManager
- SQS target with FIFO support, Kinesis target with put_record
- Stream poller fix for shard re-init on SequenceNumber errors

The _apply_connection_auth method expected PascalCase keys
(e.g. BasicAuthParameters.Username) when reading from SecretsManager,
but ConnectionService stores secrets using lowercase flat keys
(e.g. {"username": ..., "password": ...}). This caused BASIC and
API_KEY auth to silently fail with empty credentials.