Normalize rententionDays in controltower.LandingZone

[t0yv0]

Fix #3650

Adds a patch to rewrite LandingZone manifest JSON blobs to always perform normalization of the following kind:

- "retentionDays": "3650"
+ "retentionDays": 3650

[t0yv0]

Per our conversation we are not likely to be able to test this resource at integration level as it requires having sub-accounts setup which our testing infra currently does not support. To test this I massaged state.json from the ticket and tried some program variations, capturing the Diff call with PULUMI_DEBUG_GRPC and testing that particular call specifically without the cloud bits.

[github-actions]

Does the PR have any schema changes?

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

Maintainer note: consult the runbook for dealing with any breaking changes.

[github-actions]

Is README.md missing any configuration options?

assumeRoleWithWebIdentity not found in Configuration section
customCaBundle not found in Configuration section
defaultTags not found in Configuration section
ec2MetadataServiceEndpoint not found in Configuration section
ec2MetadataServiceEndpointMode not found in Configuration section
httpProxy not found in Configuration section
httpsProxy not found in Configuration section
ignoreTags not found in Configuration section
noProxy not found in Configuration section
retryMode not found in Configuration section
s3UsEast1RegionalEndpoint not found in Configuration section
sharedConfigFiles not found in Configuration section
skipRequestingAccountId not found in Configuration section
stsRegion not found in Configuration section
tokenBucketRateLimiterCapacity not found in Configuration section
useDualstackEndpoint not found in Configuration section

Please add a description for each of these options to README.md. Details about them can be found in either the upstream docs or schema.json.