Bumps clouddrove/cloudwatch-event-rule/aws to 1.0.3, which fixes the Repository tag on the Session Manager audit event rule.
1.0.2 of that module declared a repository variable, validated it, and never passed it to its labels call, so the rule was tagged Repository = https://github.com/clouddrove/terraform-aws-labels regardless of what this module passed down.
Resource-level tags take precedence over the provider's default_tags, so the wrong value silently replaced a correct account-wide Repository tag, with no plan diff because the value was constant rather than drifting.
Also strips trailing whitespace and adds missing end-of-file newlines in four workflow files and commitlint.config.cjs. These were pre-existing pre-commit violations that failed the gate on any PR touching the repo, including PRs that never went near those files.