feat(import): capture executionRoleArn during memory import

Map the API field memoryExecutionRoleArn to executionRoleArn in CLI
schema to match the runtime convention. Also update CDK L3 construct
to use an imported role via Role.fromRoleArn when executionRoleArn
is provided instead of always creating a new one.

Author: jesseturner21

src/cli/aws/agentcore-control.ts

@@ -261,6 +261,7 @@ export interface MemoryDetail {
   }[];
   tags?: Record<string, string>;
   encryptionKeyArn?: string;
+  executionRoleArn?: string;
 }
 
 /**
@@ -316,6 +317,7 @@ export async function getMemoryDetail(options: GetMemoryOptions): Promise<Memory
     eventExpiryDuration: memory.eventExpiryDuration,
     tags,
     encryptionKeyArn: memory.encryptionKeyArn,
+    executionRoleArn: memory.memoryExecutionRoleArn,
     strategies: (memory.strategies ?? []).map(s => {
       if (!s.type) {
         throw new Error(`Memory ${options.memoryId} has a strategy with missing required field: type`);

src/cli/commands/import/import-memory.ts

@@ -68,6 +68,7 @@ function toMemorySpec(memory: MemoryDetail, localName: string): Memory {
     strategies,
     ...(memory.tags && Object.keys(memory.tags).length > 0 && { tags: memory.tags }),
     ...(memory.encryptionKeyArn && { encryptionKeyArn: memory.encryptionKeyArn }),
+    ...(memory.executionRoleArn && { executionRoleArn: memory.executionRoleArn }),
   };
 }
 

src/schema/schemas/agentcore-project.ts

@@ -104,6 +104,7 @@ export const MemorySchema = z.object({
     ),
   tags: TagsSchema.optional(),
   encryptionKeyArn: z.string().optional(),
+  executionRoleArn: z.string().optional(),
 });
 
 export type Memory = z.infer<typeof MemorySchema>;