feat(api): add Cognito user pools to the cloud explorer

Adds a userpools catalog entry, schema and AwsUserPoolsAdapter, verified
against Floci core:

- list/get/create/delete user pools; create can set email or username
  sign-in, a relaxed password policy for local test users, and a public
  app client (on by default) whose id is surfaced in the pool metadata
- users as the pool's child items: list (paged), get, create and delete;
  passwords are set permanent by default so users can sign in at once
- map Cognito's HTTP-400 error names (UserNotFoundException,
  UsernameExistsException, AliasExistsException, InvalidPasswordException)
- link Floci's cognito-idp service to the new page on the diagnostics page

packages/api/src/service/runtimeDiagnostics.ts

@@ -25,6 +25,7 @@ const AWS_CONSOLE_SERVICES: Record<string, CloudServiceType[]> = {
     codebuild: ['codebuild'],
     codedeploy: ['codedeploy'],
     codepipeline: ['codepipeline'],
+    'cognito-idp': ['userpools'],
     dynamodb: ['nosql'],
     ec2: ['compute', 'networking'],
     ecr: ['ecr'],