⚠️ Convert secret module to create multiple secrets

[lorenyu]

Ticket

Resolves #642

Changes

• Rename modules/secret to modules/secrets with the following changes:
  • Accept multiple secrets instead of a single secret
  • Accept the service name
  • Outputs multiple secret arns instead of a single secret arn
• Refactor service layer root modules based on module changes

⚠️ (Optional) migration notes

For secrets with manage_method="generated", if you want to avoid regenerating the secrets, you can move the secrets to the new location with:

terraform -chdir=infra/<APP_NAME>/service state mv 'module.secrets["<SECRET_NAME>"].aws_ssm_parameter.secret[0]' 'module.secrets.aws_ssm_parameter.secrets["<SECRET_NAME>"]'
terraform -chdir=infra/<APP_NAME>/service state mv 'module.secrets["<SECRET_NAME>"].random_password.secret[0]' 'module.secrets.random_password.secrets["<SECRET_NAME>"]'    

Context for reviewers

Testing instructions, background context, more in-depth details of the implementation, and anything else you'd like to call out or ask reviewers.

Testing

See navapbc/platform-test#180