fix: kms-key deletion window range + rds password policy

- kms-key: complex example had deletion_window_days=90 (max is 30).
  Fixed to 30.
- rds: AWS rejected 'db_admin' as invalid password (needs upper+lower+
  special). Added password variable (default 'ACdlcI2026!') to the RDS
  module + interface + both example contracts.

---ci---
project: acdl
phase: P59
milestone: v1.11
status: execute
---/ci---

modules/l1/kms-key/examples/complex.yml

@@ -3,7 +3,7 @@ id: kms
 infrastructure:
   kms-key:
     inputs:
-      deletion_window_days: 90
+      deletion_window_days: 30
       description: Production CMK with 90-day deletion window
       region: us-east-1
     version: 1.0.0

modules/l1/rds/examples/complex.yml

@@ -13,5 +13,6 @@ infrastructure:
       region: us-east-1
       storage_encrypted: true
       username: db_admin
+      password: ACdlcI2026!
     version: 1.0.0
 name: rds-instance

modules/l1/rds/examples/simple.yml

@@ -11,5 +11,6 @@ infrastructure:
       instance_class: db.t3.micro
       region: us-east-1
       username: db_admin
+      password: ACdlcI2026!
     version: 1.0.0
 name: rds-instance

modules/l1/rds/interface.json

@@ -73,6 +73,12 @@
       "description": "Comma-separated subnet IDs for the DB subnet group",
       "required": false,
       "default": ""
+    },
+    "password": {
+      "type": "string",
+      "description": "Database admin password",
+      "required": false,
+      "default": "ACdlcI2026!"
     }
   },
   "outputs": {

modules/l1/rds/terraform/main.tf

@@ -11,6 +11,7 @@ resource "aws_db_instance" "this" {
   allocated_storage    = var.allocated_storage
   db_name              = var.db_name
   username             = var.username
+  password             = var.password
   multi_az             = var.multi_az
   storage_encrypted    = var.storage_encrypted
   kms_key_id           = var.kms_key_arn

modules/l1/rds/terraform/variables.tf

@@ -29,6 +29,12 @@ variable "username" {
   description = "Database admin username."
 }
 
+variable "password" {
+  type        = string
+  description = "Database admin password."
+  default     = "ACdlcI2026!"
+}
+
 variable "multi_az" {
   type        = bool
   description = "Enable Multi-AZ."