feat(cli): change set review on deploy

[orien]

Implementation of #801 and RFC 370: CLI deploy with change set review confirmation.

This feature enhances the existing --require-approval=any-change option to show all stack changes (not just security changes) and integrates CloudFormation change set creation and review to provide users with an accurate preview of what will be applied before deployment execution.

Modern cloud infrastructure contains critical stateful resources—databases, persistent storage, message queues, and other systems that hold valuable data and maintain complex state. Engineers deploying changes to these environments carry significant responsibility: a single misunderstood deployment can lead to data loss, service outages, or security vulnerabilities that affect customers and business operations. While Infrastructure as Code provides repeatability and version control, it doesn't eliminate the fundamental need for engineers to understand precisely what changes will be applied before execution. Tooling must bridge this gap by providing clear, accurate previews of deployment impact—especially for stateful resources where "undo" isn't always possible. This enhancement ensures that engineers have the complete information they need to make informed decisions about infrastructure changes.

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[orien]

Support deploying/executing an existing CloudFormation change set.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.93%. Comparing base (ba59816) to head (4dd1262).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #892      +/-   ##
==========================================
+ Coverage   87.70%   87.93%   +0.22%     
==========================================
  Files          72       72              
  Lines       10121    10203      +82     
  Branches     1337     1352      +15     
==========================================
+ Hits         8877     8972      +95     
+ Misses       1219     1206      -13     
  Partials       25       25              

Flag	Coverage Δ
suite.unit	87.93% <100.00%> (+0.22%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[mrgrain]

@orien First part of this should be completed by #1255

[mrgrain]

Superseded by

• fix(cli): use change set for deploy approval diff when using change-set method #1273 (released, allow review of actual change set before approval), and
• feat(cli): add cdk deploy --method=execute-change-set for two-step deployment workflows #1271 (planned, will add --method=execute-change-set)

[mrgrain]

Thank you for your feedback @orien and the contribution of the initial POC for this!

[orien]

Thanks @mrgrain. I haven't had time to pursue this idea further.