GitHub OIDC ECR policy is not environment specific

[rochecompaan]

The GitHub OIDC ECR policy is not specific to the environment (e.g., sandbox, production). As a result, the last environment created in Terraform will only allow access to the ECR repo for that particular environment. Access to ECR repos from other environments will be lost.