Replace SSH-style git@ source with git::https:// for all three
aws-iam-role module references (patch_role, patch_execution_role,
patch_execproxy_role). HTTPS is required in environments where SSH
agent forwarding is unavailable or not configured.

…alue error

Terraform cannot use compute-time resource ARNs (aws_iam_policy.*.arn) as
for_each set keys since they are unknown at plan time. Replace with statically
constructed ARNs using locals that are always known at plan time:
  format("arn:%v:iam::%v:policy/%v", local.partition, local.account_id, local.<name>)

Fixes 'Invalid for_each argument' errors on all three role modules.

…sus standards