feat(s3tables): implement ITaggableV2 on TableBucket and Table L2 constructs (#37277)

### Issue # (if applicable)

Related to #33054.

### Reason for this change

The L1 constructs (`CfnTableBucket`, `CfnTable`) implement `ITaggableV2`, so `Tags.of()` already propagates tags to the underlying CloudFormation resources. However, the L2 constructs (`TableBucket`, `Table`) don't formally implement `ITaggableV2`, which means:

- `TagManager.of(tableBucket)` returns `undefined` on the L2 construct
- The L2 constructs aren't discoverable as taggable by code that checks for `ITaggableV2`

### Description of changes

Implement `ITaggableV2` on both `TableBucket` and `Table` L2 constructs by delegating `cdkTagManager` to the underlying L1 resource's tag manager (same pattern as `VpcOrigin` in `aws-cloudfront`).

- `TableBucket` implements `ITaggableV2` with `cdkTagManager` delegated to `CfnTableBucket`
- `Table` implements `ITaggableV2` with `cdkTagManager` delegated to `CfnTable`
- Unit tests for construct-level and stack-level tag propagation (4 new tests)
- README updated with tagging usage examples
- Rosetta fixture updated with `Tags` import

### Describe any new or updated permissions being added

N/A

### Description of how you validated changes

1. Built `@aws-cdk/aws-s3tables-alpha` — 0 errors, 0 warnings
2. Unit tests — 193 passed (4 new), coverage: 94.46% statements, 90.21% branches
3. Lint — ESLint + awslint + pkglint clean
4. Rosetta — README code samples compile
5. Integration test snapshots — 6/6 UNCHANGED

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: mgarbvs

packages/@aws-cdk/aws-s3tables-alpha/README.md

@@ -277,6 +277,18 @@ const permissions = new iam.PolicyStatement({
 table.addToResourcePolicy(permissions);
 ```
 
+### Tagging
+
+Both `TableBucket` and `Table` support tagging through CDK's standard tagging mechanism:
+
+```ts
+Tags.of(tableBucket).add('Environment', 'Production');
+Tags.of(table).add('Team', 'DataEngineering');
+
+// Stack-level tags propagate to all resources
+Tags.of(stack).add('Project', 'DataLake');
+```
+
 ## Coming Soon
 
 L2 Construct support for:

packages/@aws-cdk/aws-s3tables-alpha/lib/table-bucket.ts

@@ -2,7 +2,7 @@ import { EOL } from 'os';
 import * as iam from 'aws-cdk-lib/aws-iam';
 import * as kms from 'aws-cdk-lib/aws-kms';
 import * as s3tables from 'aws-cdk-lib/aws-s3tables';
-import type { IResource, RemovalPolicy } from 'aws-cdk-lib/core';
+import type { IResource, ITaggableV2, RemovalPolicy, TagManager } from 'aws-cdk-lib/core';
 import { Resource, UnscopedValidationError, Token } from 'aws-cdk-lib/core';
 import { memoizedGetter } from 'aws-cdk-lib/core/lib/helpers-internal';
 import { addConstructMetadata } from 'aws-cdk-lib/core/lib/metadata-resource';
@@ -432,7 +432,7 @@ export interface TableBucketAttributes {
  * });
  */
 @propertyInjectable
-export class TableBucket extends TableBucketBase {
+export class TableBucket extends TableBucketBase implements ITaggableV2 {
   /** Uniquely identifies this class. */
   public static readonly PROPERTY_INJECTION_ID: string = '@aws-cdk.aws-s3tables-alpha.TableBucket';
 
@@ -596,6 +596,11 @@ export class TableBucket extends TableBucketBase {
    */
   private readonly resource: s3tables.CfnTableBucket;
 
+  /**
+   * The tag manager for this resource.
+   */
+  public readonly cdkTagManager: TagManager;
+
   /**
    * The resource policy for this tableBucket.
    */
@@ -629,6 +634,7 @@ export class TableBucket extends TableBucketBase {
       metricsConfiguration: props.requestMetricsStatus ? { status: props.requestMetricsStatus } : undefined,
     });
 
+    this.cdkTagManager = this.resource.cdkTagManager;
     this.resource.applyRemovalPolicy(props.removalPolicy);
   }
 

packages/@aws-cdk/aws-s3tables-alpha/lib/table.ts

@@ -3,7 +3,9 @@ import * as iam from 'aws-cdk-lib/aws-iam';
 import { CfnTable, CfnTablePolicy } from 'aws-cdk-lib/aws-s3tables';
 import type {
   IResource,
+  ITaggableV2,
   RemovalPolicy,
+  TagManager,
 } from 'aws-cdk-lib/core';
 import {
   Resource,
@@ -634,7 +636,7 @@ export interface TableAttributes {
  * An S3 Table with helpers.
  */
 @propertyInjectable
-export class Table extends TableBase {
+export class Table extends TableBase implements ITaggableV2 {
   /** Uniquely identifies this class. */
   public static readonly PROPERTY_INJECTION_ID: string = '@aws-cdk.aws-s3tables-alpha.Table';
 
@@ -738,6 +740,11 @@ export class Table extends TableBase {
    */
   private readonly _resource: CfnTable;
 
+  /**
+   * The tag manager for this resource.
+   */
+  public readonly cdkTagManager: TagManager;
+
   /**
    * The name of this table
    */
@@ -784,6 +791,7 @@ export class Table extends TableBase {
     this.namespace = props.namespace;
     this.tableName = props.tableName;
     this.tableArn = this._resource.attrTableArn;
+    this.cdkTagManager = this._resource.cdkTagManager;
     this._resource.applyRemovalPolicy(props.removalPolicy);
     this.node.addDependency(this.namespace);
   }

packages/@aws-cdk/aws-s3tables-alpha/rosetta/default.ts-fixture

@@ -1,5 +1,5 @@
 import { Construct } from 'constructs';
-import { Stack } from 'aws-cdk-lib';
+import { Stack, Tags } from 'aws-cdk-lib';
 import { TableBucket, UnreferencedFileRemovalStatus, TableBucketEncryption, RequestMetricsStatus, Namespace, Table, Status, OpenTableFormat, IcebergTransform, SortDirection, NullOrder } from '@aws-cdk/aws-s3tables-alpha';
 import * as iam from 'aws-cdk-lib/aws-iam';
 import * as kms from 'aws-cdk-lib/aws-kms';

packages/@aws-cdk/aws-s3tables-alpha/test/integration/integ.tagging.js.snapshot/TaggedTableBucketStack.assets.json

@@ -0,0 +1,70 @@
+{
+ "Resources": {
+  "TaggedBucket5A84A2D2": {
+   "Type": "AWS::S3Tables::TableBucket",
+   "Properties": {
+    "TableBucketName": "tagged-table-bucket",
+    "Tags": [
+     {
+      "Key": "Environment",
+      "Value": "Test"
+     },
+     {
+      "Key": "Project",
+      "Value": "S3Tables"
+     }
+    ],
+    "UnreferencedFileRemoval": {}
+   },
+   "UpdateReplacePolicy": "Delete",
+   "DeletionPolicy": "Delete"
+  }
+ },
+ "Outputs": {
+  "ExportsOutputFnGetAttTaggedBucket5A84A2D2TableBucketARN325752C1": {
+   "Value": {
+    "Fn::GetAtt": [
+     "TaggedBucket5A84A2D2",
+     "TableBucketARN"
+    ]
+   },
+   "Export": {
+    "Name": "TaggedTableBucketStack:ExportsOutputFnGetAttTaggedBucket5A84A2D2TableBucketARN325752C1"
+   }
+  }
+ },
+ "Parameters": {
+  "BootstrapVersion": {
+   "Type": "AWS::SSM::Parameter::Value<String>",
+   "Default": "/cdk-bootstrap/hnb659fds/version",
+   "Description": "Version of the CDK Bootstrap resources in this environment, automatically retrieved from SSM Parameter Store. [cdk:skip]"
+  }
+ },
+ "Rules": {
+  "CheckBootstrapVersion": {
+   "Assertions": [
+    {
+     "Assert": {
+      "Fn::Not": [
+       {
+        "Fn::Contains": [
+         [
+          "1",
+          "2",
+          "3",
+          "4",
+          "5"
+         ],
+         {
+          "Ref": "BootstrapVersion"
+         }
+        ]
+       }
+      ]
+     },
+     "AssertDescription": "CDK bootstrap stack version 6 required. Please run 'cdk bootstrap' with a recent version of the CDK CLI."
+    }
+   ]
+  }
+ }
+}