fix(roles): use HTTPS source URLs for aws-iam-role modules

roles.tf

@@ -1,6 +1,6 @@
 # patch_role — assumed by patch_execution_role to perform EC2 operations in target accounts
 module "patch_role" {
-  source = "git@github.e.it.census.gov:terraform-modules/aws-iam-role.git?ref=tf-upgrade"
+  source = "git::https://github.e.it.census.gov/terraform-modules/aws-iam-role.git?ref=tf-upgrade"
 
   role_name              = local.patch_role_name
   role_description       = format("Assumed by %v to execute patching operations on EC2 instances in target accounts", local.patch_execution_role_name)
@@ -12,7 +12,7 @@ module "patch_role" {
 
 # patch_execution_role — assumed by Lambda functions to orchestrate patching
 module "patch_execution_role" {
-  source = "git@github.e.it.census.gov:terraform-modules/aws-iam-role.git?ref=tf-upgrade"
+  source = "git::https://github.e.it.census.gov/terraform-modules/aws-iam-role.git?ref=tf-upgrade"
 
   role_name              = local.patch_execution_role_name
   role_description       = format("Assumed by Lambda functions to invoke patch operations, access SQS/RDS, and assume %v in target accounts", local.patch_role_name)
@@ -26,7 +26,7 @@ module "patch_execution_role" {
 # This instance profile is used by the EC2 host running p4proxy to authenticate
 # to RDS via IAM and to assume patch_execution_role for orchestration tasks.
 module "patch_execproxy_role" {
-  source = "git@github.e.it.census.gov:terraform-modules/aws-iam-role.git?ref=tf-upgrade"
+  source = "git::https://github.e.it.census.gov/terraform-modules/aws-iam-role.git?ref=tf-upgrade"
 
   role_name               = local.patch_execproxy_role_name
   role_description        = format("Applied to the EC2 host running p4proxy; allows RDS IAM auth and assumption of %v", local.patch_execution_role_name)