refactor(ansible): extract AWS CLI install bundle into internal/insta…

[dliappis]

What kind of change does this PR introduce?

Refactor (ansible task structure, no behavior change).

What is the current behavior?

A number of AWS install/setup tasks live inside ansible/tasks/setup-supabase-internal.yml, mixed in with the rest of the supabase-internal install steps. There's no atomic "AWS CLI install bundle" boundary.

What is the new behavior?

Same install behavior. The AWS tasks now live in a dedicated ansible/tasks/internal/install-aws-cli.yml, imported from the same spot in setup-supabase-internal.yml.

This lays cleaner boundaries for future postgres AMI runtime decomposition work, without changing any install behavior, conditionals, or tags.

Preserved precisely:

• Conditional gating: parent Install Supabase specific content import still gates on when: debpkg_mode or nixpkg_mode. The new file inherits this implicitly.
• Tag inheritance: the new import_tasks line carries no extra tags, so the moved tasks continue to inherit only install-supabase-internal from the outermost wrapper — identical to before.
• ec2-instance-connect in playbook.yml is intentionally not moved. It stays as a top-level task in playbook.yml with its existing aws-only tag and when: qemu_mode is undefined gate. (Moving it would have changed tag semantics with possible risk hence out of scope for this refactor.)

Additional context

Related https://linear.app/supabase/project/postgres-ami-runtime-decomposition-90ecfc1d03d4/overview

[dliappis]

I did a small sanity check by comparing tasks created via

# confirm we are on the branch for this PR
git --no-pager log -1 --format="%D %h %s"
HEAD -> refactor/extract-aws-ec2-host-tooling, origin/refactor/extract-aws-ec2-host-tooling d109fc0c refactor(ansible): extract AWS CLI install bundle into internal/install-aws-cli.yml

# list of tasks created by this branch `refactor/extract-aws-ec2-host-tooling`
ansible-playbook --list-tasks ansible/playbook.yml \
    --extra-vars '{"nixpkg_mode":true,"debpkg_mode":false,"stage2_nix":false}' \
    2>/dev/null > /tmp/branch.txt

# list of tasks by latest develop branch
git worktree add /tmp/pg-develop develop
cd /tmp/pg-develop && ansible-playbook --list-tasks ansible/playbook.yml \
    --extra-vars '{"nixpkg_mode":true,"debpkg_mode":false,"stage2_nix":false}' \
    2>/dev/null) > /tmp/develop.txt

# compare them, shows no change
diff /tmp/develop.txt /tmp/branch.txt