refactor(storage): separate runner config housekeeping

[edersonbrilhante]

Description

Moves runner-config cleanup behind the provider-neutral RunnerConfigHousekeeper capability. The AWS SSM adapter loads the configured token path, paginates through its parameters, identifies entries older than the configured age, supports dry-run reporting, and deletes eligible parameters while isolating individual deletion failures.

The control-plane Lambda now constructs and invokes the capability directly. The existing ssmHousekeeper handler export and the old cleanSSMTokens import path remain as direct deprecated compatibility aliases so current Terraform handler configuration and deployed integrations continue to work during migration.

Test Plan

• Added/updated housekeeping and Lambda compatibility tests.
• git diff --check passed.
• Runtime Yarn tests could not be run locally because the repository's pinned Yarn launcher is unavailable in this environment; CI should provide the full test result.

Related Issues

• Related storage-backend work: feat: add optional DynamoDB runner config storage #5266

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None