refactor: use gritql for cdk and terraform metrics transforms

[cogwirrel]

Reason for this change

GritQL is a query language for modifying source code and supports typescript, terraform and python, and so the intention is to gradually migrate our ast manipulation to use this instead so that we can perform python ast updates, and have a consistent way to do this regardless of language.

Description of changes

Use GritQL to transform the metrics aspect for cdk and metrics cloudformation stack for Terraform.

Also replace illegible ast construction code for cognito auth with readable gritql! :)

Currently, the only way we can invoke gritql is to wrap the cli, published to npm as @getgrit/cli, but if biomejs/gritql#617 is merged we can switch to use napi bindings which is faster and more reliable - only napi bindings for mac are published right now so we can't use it yet unfortunately.

Description of how you validated changes

Unit tests, integration tests

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[codecov-commenter]

Codecov Report

❌ Patch coverage is 83.33333% with 11 lines in your changes missing coverage. Please review.
✅ Project coverage is 91.47%. Comparing base (3b0f999) to head (51c1dba).
⚠️ Report is 2 commits behind head on main.

Files with missing lines	Patch %	Lines
packages/nx-plugin/src/utils/ast.ts	77.77%	9 Missing and 1 partial ⚠️
...gin/src/ts/react-website/cognito-auth/generator.ts	66.66%	0 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #447      +/-   ##
==========================================
- Coverage   91.51%   91.47%   -0.04%     
==========================================
  Files          86       86              
  Lines        2957     3016      +59     
  Branches      646      664      +18     
==========================================
+ Hits         2706     2759      +53     
- Misses         98      106       +8     
+ Partials      153      151       -2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[agdimech]

can we just do this with timeouts/sleep instead of busy wait?

await (new Promise(resolve => setTimeout(resolve, delay)))

[cogwirrel]

Yeah good shout! :)

[agdimech]

Just want to confirm this does the following:

• Will only work if within a metric aspect body (where { ${WITHIN_METRICS_ASPECT},)
• Will do nothing if it already contains the metric ($old <: not contains \'${info.metric}'\)
• Will set $old to [$info.metric] if $old is []
• Will set $old to [$items, $info.metric] if $old has $items

[cogwirrel]

Yep that's right! :) <: reads as "matches". This is a bit harder to read than most gritql queries as the += is mutative. Unfortunately multi-line arrays with trailing commas break what I'd intuitively do:

const tags: string[] = [$items] => const tags: string[] = [$items, info.metric]