Start connecting an S3 bucket with one click

Creates a pending connection and returns a CloudFormation quick-create link. The stack makes a role that trusts Rendobar's own OpenID issuer for this connection alone and reports back; no access keys exist anywhere. The response also carries the trust policy and Terraform for a hand-made role, finished with a PATCH carrying the role ARN.