feat: Import existing nf-core-awsmegatests S3 bucket and update requirements

- Replace generic bucket creation with import of existing nf-core-awsmegatests bucket
- Add resource protection to prevent accidental deletion
- Update requirements.txt to match pyproject.toml dependencies
- Add comprehensive resource management notes for seqerakit integration
- Address concerns from previous infrastructure import attempts (PR #58)

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>

Author: edmundmiller

pulumi/AWSMegatests/__main__.py

@@ -6,11 +6,26 @@
 import pulumi_onepassword as onepassword
 from pulumi_aws import s3
 
-# Create an AWS resource (S3 Bucket)
-bucket = s3.Bucket("my-bucket")
+# Import existing AWS resources used by nf-core megatests
+# S3 bucket for Nextflow work directory (already exists)
+nf_core_awsmegatests_bucket = s3.Bucket(
+    "nf-core-awsmegatests",
+    bucket="nf-core-awsmegatests",
+    opts=pulumi.ResourceOptions(
+        import_="nf-core-awsmegatests",  # Import existing bucket
+        protect=True,  # Protect from accidental deletion
+    ),
+)
 
-# Export the name of the bucket
-pulumi.export("bucket_name", bucket.id)  # type: ignore[attr-defined]
+# Export the bucket information
+pulumi.export(
+    "megatests_bucket",
+    {
+        "name": nf_core_awsmegatests_bucket.bucket,
+        "arn": nf_core_awsmegatests_bucket.arn,
+        "region": "eu-west-1",
+    },
+)
 
 # Configure the 1Password provider explicitly
 onepassword_config = pulumi.Config("pulumi-onepassword")
@@ -38,6 +53,12 @@
 # NOTE: We could check for tw-cli availability here, but we'll let seqerakit
 # throw the appropriate error if it's missing. Seqerakit requires tw-cli to be
 # installed and available in PATH.
+#
+# NOTE: Seqerakit will create and manage:
+# - AWS Batch compute environments and job queues
+# - IAM roles (ExecutionRole, FargateRole) with TowerForge prefix
+# - Security groups and networking resources
+# These are managed by Seqera Platform and should not be imported into Pulumi
 seqerakit_environment = {
     "TOWER_ACCESS_TOKEN": tower_access_token,
     "ORGANIZATION_NAME": "nf-core",

pulumi/AWSMegatests/requirements.txt

@@ -1,2 +1,6 @@
-pulumi>=3.0.0,<4.0.0
-pulumi-aws>=6.0.2,<7.0.0
+pulumi>=3.173.0,<4.0.0
+pulumi-aws>=6.81.0,<7.0.0
+pulumi-github>=6.4.0,<7.0.0
+pulumi-command>=1.0.1,<2.0.0
+pulumi-onepassword>=1.1.0,<2.0.0
+seqerakit>=0.4.9