feat(P4): Nova rebrand — AWS resource migration (REQ-163)

Rename all acdl-* AWS resources → nova-* across terraform (DynamoDB,
Secrets Manager, Lambda, SNS, SG, KMS alias, ECS, ECR, IAM user/policy,
state bucket, ALB, VPC/subnet names). Lambda default table names → nova-*
(D-111). State bucket backend → nova-tfstate (-migrate-state documented).
New docs/NOVA_AWS_MIGRATION.md runbook (staged migration + rollback).
New scripts/migrate_dynamodb_data.py (scan+copy, dry-run default).
acdl-deploy- → nova-deploy- role ARN in deploy workflows. Test fixtures
updated; terraform validate + pytest + run_ci.sh PASS.

---ci---
project: acdl
phase: 4
milestone: v1.15
status: execute
---/ci---

modules/l1/alb/instance.json

@@ -11,7 +11,7 @@
       "type": "aws:elbv2:loadbalancer",
       "module": "alb@1.0.0",
       "inputs": {
-        "name": "acdl-alb",
+        "name": "nova-alb",
         "subnets": "subnet-12345",
         "security_group": "sg-12345",
         "region": "us-east-1"
@@ -27,7 +27,7 @@
       "type": "aws:elbv2:targetgroup",
       "module": "alb@1.0.0",
       "inputs": {
-        "name": "acdl-alb",
+        "name": "nova-alb",
         "port": 80,
         "protocol": "HTTP",
         "region": "us-east-1"