chore(deps): Update xstate to v5.32.4

[X-Guardian]

Description

Bumps xstate from 4.38.3 to 5.32.4 (latest) in @cdktn/cli-core, the only package that declares it.

This is a major version bump (4.x → 5.x) and required migrating the deploy state machine, its consumer, and its tests to the reworked v5 API:

• createMachine<Ctx, Evt, State>(…) → setup({ types, actors }).createMachine(…). The generic-parameter form was replaced by the setup() builder with a types block, in deploy-machine.ts. The predictableActionArguments flag was dropped (predictable ordering is the default in v5) and services became actors.
• Invoked callback service → fromCallback. The v4 (context, event) => (send, onReceive) => {…} factory became fromCallback(({ sendBack, receive, input }) => …). Since v5 invoked actors receive input rather than the triggering event, the spawn config now flows in through invoke.input. The actor is built by makeTerraformPtyService(spawn) so tests can inject a mock pty.
• send(…, { to }) → sendTo(…); assign<Ctx, Evt> → assign. Action creators were split and the assign implementation signature changed to a single argument.
• raise(…) → sendTo(({ self }) => self, …). The two internally re-emitted events (EXITED on a missing variable, and the OVERRIDE_REJECTED_EXTERNALLY re-label of an external discard) were sent to self rather than raised. Raised events are internal micro-steps and do not surface through the inspection API, so the consumer would otherwise stop observing them.
• interpret(…) → createActor(…, { inspect }). The actor is now started explicitly before events are sent.

The consumer in terraform-cli.ts needed the most care, because v5 snapshots no longer expose the triggering event (state.event):

• Transitions now come from the actor's own service.subscribe(…), which yields a fully-typed snapshot for the root actor only — replacing service.onTransition(…).
• Events come from the inspect callback (the only source that still carries the triggering event), replacing service.onEvent(…). The root actor is identified by reference so the invoked pty child's events are ignored, and events are narrowed through the existing isDeployEvent guard.
• The last EXITED exit code is now remembered from inspection to decide whether the run failed, since it is no longer readable off the final snapshot.
• waitFor is imported from xstate and its predicate uses snapshot.status === "done"; service.send("X") calls became service.send({ type: "X" }).

The tests in deploy-machine.test.ts were migrated to match: interpret().onTransition → createActor().subscribe, withConfig({ services }) → provide({ actors }), machine.transition → getNextSnapshot, and the state.event assertions rebuilt on the inspection API.

Checklist

• I have updated the PR title to match CDKTN's style guide
• I have run the linter on my code locally
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation if applicable
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works if applicable
• New and existing unit tests pass locally with my changes