test connection to AWS Secrets Manager

AWS region (e.g., us-east-1)

AWS Access Key ID (optional, uses default credential chain if not provided)

AWS Secret Access Key (optional)

Custom endpoint URL for testing (e.g., LocalStack)

Prefix for secret names (e.g., windmill/)