test(cdk): make the _KNOWN_WRITEABLE_WORKFLOW_IDS parser tolerant of ruff's frozenset formatting (aws-samples#247 PR aws-samples#373)

The workflows contract test (CDK descriptors ↔ agent config) parses
_KNOWN_WRITEABLE_WORKFLOW_IDS out of agent/src/config.py with a regex that
required frozenset((…)) with adjacent parens. When the earlier lint pass
ran ruff format on config.py it expanded the frozenset to multi-line
(frozenset(\n (\n "…",\n )\n)), so the regex returned null and the
test failed (1 of 2574). Fix: tolerate whitespace between the parens
(frozenset\(\s*\(…\)\s*\)) so it matches either single- or multi-line
formatting. 21 workflows tests green; regex verified against the live
config.py shape.

Author: isadeks

cdk/test/handlers/shared/workflows.test.ts

@@ -211,7 +211,9 @@ describe('CDK descriptors stay in sync with agent/workflows/**', () => {
     const configPy = fs.readFileSync(
       path.resolve(__dirname, '../../../../agent/src/config.py'), 'utf8',
     );
-    const match = configPy.match(/_KNOWN_WRITEABLE_WORKFLOW_IDS\s*=\s*frozenset\(\(([^)]*)\)\)/s);
+    // Tolerate ruff's formatting of the frozenset: it may render single-line
+    // ``frozenset(("a", "b"))`` or multi-line with whitespace between the parens.
+    const match = configPy.match(/_KNOWN_WRITEABLE_WORKFLOW_IDS\s*=\s*frozenset\(\s*\(([^)]*)\)\s*\)/s);
     expect(match).not.toBeNull();
     const agentWriteable = new Set(
       [...match![1].matchAll(/"([^"]+)"/g)].map(m => m[1]),