test: various e2e test fixes

[ssicard]

Description

• Added missing CLOUDFLARE_HYPERDRIVE_DATABASE_* env vars to match e2e-tests.yml
• Fixed full-suite runs skipping import block hoisting by auto-discovering module subdirectories when --resources is not passed
• Added missing file to e2e/drift-exemptions/ so it becomes the source of truth for make sync-exemptions
• Replaced hardcoded secret name patterns with a single 'name\s*=\s*"[^"]+"' pattern scoped to the existing resource/module filters
• Removed stale empty directory tree left over from an older e2e layout
• fixed prefix for device posture integration

Motivation

These are various e2e test fixes in order to get the pipeline on main passing again.

Fixes #

Type of change

• New resource transformer
• Fix to an existing transformer
• CLI / framework change
• Documentation
• Test / CI
• Refactoring (no behaviour change)

Testing

• Unit tests (make test-unit)
• Integration tests (make test-integration)
• E2E tests (if applicable)
• make lint-testdata passes

Checklist

• I have read CONTRIBUTING.md
• New resource transformers are registered in internal/registry/registry.go
• Testdata resource names use the cftftest prefix
• Any # MIGRATION WARNING comments are documented in DIAGNOSTICS.md