sec(iac): remove SecretsManagerDescribe wildcard block (closes #430)

secretsmanager:ListSecrets on Resource="*" in SecretsManagerDescribe
was a duplicate of the ListSecrets already in the SecretsManager block
scoped to cudly-* ARNs. The wildcard grant let the CI/CD role enumerate
all secret names in the account. Remove the over-privileged statement.

Author: cristim

terraform/environments/aws/ci-cd-permissions/policy_data.tf

@@ -189,12 +189,6 @@ resource "aws_iam_policy" "data" {
         ]
         Resource = "arn:aws:secretsmanager:*:*:secret:cudly-*"
       },
-      {
-        Sid      = "SecretsManagerDescribe"
-        Effect   = "Allow"
-        Action   = ["secretsmanager:ListSecrets"]
-        Resource = "*"
-      },
       {
         Sid    = "S3TerraformState"
         Effect = "Allow"