docs: document executionRoleArn in runtime spec

The runtime spec table in configuration.md omitted the existing
optional executionRoleArn field, leading users (see issue #870) to
believe the CLI had no way to bring their own IAM execution role.
The field is already supported in the schema.

Confidence: high
Scope-risk: narrow

Author: jesseturner21

docs/configuration.md

@@ -191,6 +191,7 @@ on the next deployment.
 | `authorizerConfiguration` | No       | JWT authorizer settings (for `CUSTOM_JWT`)                      |
 | `requestHeaderAllowlist`  | No       | Headers to forward to the agent                                 |
 | `lifecycleConfiguration`  | No       | Runtime session lifecycle settings (idle timeout, max lifetime) |
+| `executionRoleArn`        | No       | ARN of an existing IAM execution role (skips CDK-managed role)  |
 | `tags`                    | No       | Agent-level tags                                                |
 
 ### Runtime Versions