[ecs-instance-log-mcp] Add ECS instance diagnostics MCP

[shyamkulkarni]

Description

Adds a sample ECS instance diagnostics MCP gateway under mcp/ecs-instance-log-mcp.

The package provides:

• SSM-based ECS EC2 instance log collection and indexed analysis
• Exact cluster, region, instance-role, and active membership validation
• KMS-encrypted artifacts with canonical instance-scoped S3 access
• Default-on native SSM approval for collection and batch operations
• Opt-in, human-approved, task-scoped packet capture
• Automated archive extraction for .zip, .tar.gz, and .tgz bundles
• Deployment validation, architecture documentation, runbooks, and security regression tests

Generated deployment outputs, local dependencies, build artifacts, nested Git metadata, and credentials are excluded.

Type of change

• New skill
• New custom agent
• Update to an existing skill or agent
• Documentation or infrastructure change

Testing

• npm ci
• npm run build
• python3 -m pytest -q — 94 passed
• bash -n deploy.sh
• bash -n get-config.sh
• npm run synth -- --quiet with non-production synthesis inputs
• git diff --cached --check
• Added-file scan: no AWS access keys, private keys, assigned secrets, account-specific ID, or internal repository URL detected

License confirmation

• By submitting this pull request, I confirm that my contribution is made under the terms of the Apache License 2.0.