fix(P60/P62): ALB name_prefix + adapter dedup + L2 composition wiring

Three fixes from CI run 3027 (06f4fc7):

1. ALB name_prefix too long: AWS limits target group name_prefix to 6
   chars. Changed from "acdl-ci-alb-" (12) to "tg-ci-" (6).

2. Adapter deduplication: multi-resource L1s (cloudfront with
   distribution + OAC) expand to multiple stack resources sharing the
   same terraform dir. The adapter was emitting TWO module blocks for
   the same dir, the second missing required inputs. Now deduplicates
   by terraform dir, merging inputs from all resources that point to
   it. Adapter stays under 200 lines (194).

3. L2 microservice composition: ECR module requires "name" input but
   the composition didn't wire it. Added wires for ecr.inputs.name
   (default "app-repo") and roles.inputs.role_name (default "app-role").

Note: the ecs-service/uptime/rds failures in run 3027 were caused by
the P64 teardown destroying the CI VPC while the pipeline was still
running (timing issue). The next CI run after this push will have a
fresh CI VPC.

Regression: 485 passed, 5 deselected.

---ci---
project: acdl
phase: P60
milestone: v1.11
status: execute
---/ci---

adapters/terraform/adapter.py

@@ -152,7 +152,23 @@ def adapt(stack_instance, out_dir):
 
     # --- main.tf: data blocks + module instantiations + root outputs ---
     parts = list(data_blocks)
-    parts.extend(_emit_module_block(r, terraform_dirs, repo_root, set(data_source_names)) for r in resources)
+
+    # Deduplicate: multi-resource L1s (e.g. cloudfront) expand to multiple
+    # stack resources sharing one terraform dir. Emit ONE module block per
+    # dir, merging inputs. Use the first resource's id as the module name.
+    seen = {}  # terraform_dir → resource
+    for r in resources:
+        tf_dir = terraform_dirs.get(_module_name(r))
+        if tf_dir and tf_dir in seen:
+            for k, v in r.get("inputs", {}).items():
+                if k != "region" and k not in seen[tf_dir].get("inputs", {}):
+                    seen[tf_dir].setdefault("inputs", {})[k] = v
+            for k, v in r.get("outputs", {}).items():
+                seen[tf_dir].setdefault("outputs", {})[k] = v
+        elif tf_dir:
+            seen[tf_dir] = r
+    merged = list(seen.values()) if seen else resources
+    parts.extend(_emit_module_block(r, terraform_dirs, repo_root, set(data_source_names)) for r in merged)
     for out_name, out_spec in stack_outputs.items():
         if isinstance(out_spec, dict) and "from" in out_spec:
             rid = out_spec["from"]

modules/l1/alb/terraform/main.tf

@@ -6,7 +6,7 @@ resource "aws_lb" "this" {
 }
 
 resource "aws_lb_target_group" "this" {
-  name_prefix = "${var.name}-"
+  name_prefix = "tg-ci-"
   port        = var.port
   protocol    = var.protocol
   vpc_id      = var.vpc_id

modules/l2/microservice/composition.json

@@ -17,6 +17,8 @@
   ],
   "wires": [
     {"from": "contract.inputs.name", "to": "alb.inputs.name", "default": "app"},
+    {"from": "contract.inputs.name", "to": "ecr.inputs.name", "default": "app-repo"},
+    {"from": "contract.inputs.name", "to": "roles.inputs.role_name", "default": "app-role"},
     {"from": "contract.inputs.region", "to": "cluster.inputs.region"},
     {"from": "contract.inputs.region", "to": "ecr.inputs.region"},
     {"from": "contract.inputs.region", "to": "roles.inputs.region"},