Motivation

EC2/ECS documentation needs to reflect new workload tag requirement in IAM roles for DPP token issuance.

Implementation information

Update docs at https://developer.konghq.com/mesh/ecs/#iam-role to include:

• kuma.io/workload as required IAM role tag
• Example IAM policy with workload tag
• Explanation of workload grouping and observability benefits
• How to choose appropriate workload names
• Relationship to MeshIdentity and metrics