feat(s3tables): implement ITaggableV2 on TableBucket and Table L2 constructs

[mgarbvs]

Issue # (if applicable)

Related to #33054.

Reason for this change

The L1 constructs (CfnTableBucket, CfnTable) implement ITaggableV2, so Tags.of() already propagates tags to the underlying CloudFormation resources. However, the L2 constructs (TableBucket, Table) don't formally implement ITaggableV2, which means:

• TagManager.of(tableBucket) returns undefined on the L2 construct
• The L2 constructs aren't discoverable as taggable by code that checks for ITaggableV2

Description of changes

Implement ITaggableV2 on both TableBucket and Table L2 constructs by delegating cdkTagManager to the underlying L1 resource's tag manager (same pattern as VpcOrigin in aws-cloudfront).

• TableBucket implements ITaggableV2 with cdkTagManager delegated to CfnTableBucket
• Table implements ITaggableV2 with cdkTagManager delegated to CfnTable
• Unit tests for construct-level and stack-level tag propagation (4 new tests)
• README updated with tagging usage examples
• Rosetta fixture updated with Tags import

Describe any new or updated permissions being added

N/A

Description of how you validated changes

1. Built @aws-cdk/aws-s3tables-alpha — 0 errors, 0 warnings
2. Unit tests — 193 passed (4 new), coverage: 94.46% statements, 90.21% branches
3. Lint — ESLint + awslint + pkglint clean
4. Rosetta — README code samples compile
5. Integration test snapshots — 6/6 UNCHANGED

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[aws-cdk-automation]

(This review is outdated)

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

[github-actions]

⚠️ Experimental Feature: This security report is currently in experimental phase. Results may include false positives and the rules are being actively refined.
This security report is NOT a review blocker. Please try merge from main to avoid findings unrelated to the PR.

---

	Tests	Passed ✅	Skipped	Failed
Security Guardian Results	72 ran	72 passed

Test	Result
No test annotations available

• View Security Guardian Results

[github-actions]

⚠️ Experimental Feature: This security report is currently in experimental phase. Results may include false positives and the rules are being actively refined.
This security report is NOT a review blocker. Please try merge from main to avoid findings unrelated to the PR.

---

	Tests	Passed ✅	Skipped	Failed
Security Guardian Results with resolved templates	72 ran	72 passed

Test	Result
No test annotations available

• View Security Guardian Results with resolved templates

[alvazjor]

@mgarbvs approving, but this will require rebasing, as there are some conflicts

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[alvazjor]

Hi @mgarbvs, this PR has a merge conflict with main that's blocking the auto-merge. Could you rebase on latest main and resolve the conflicts? Once that's done we should be good to merge. Thanks!

Pull request has been modified.

[mgarbvs]

Solved merge conflicts and rebased!

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-03-26 10:59 UTC · Rule: default-squash
• ✅ Checks passed · in-place
• ✅ Merged — 2026-03-26 11:32 UTC · at b23ce383fd8f63353fe2dee060e52530bd42c824

This pull request spent 32 minutes 36 seconds in the queue, including 32 minutes 26 seconds running CI.

Required conditions to merge

• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • feat(s3tables): implement ITaggableV2 on TableBucket and Table L2 constructs #37277
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • feat(s3tables): implement ITaggableV2 on TableBucket and Table L2 constructs #37277
• any of [🛡 GitHub branch protection]:
  • check-success = validate-pr
  • check-neutral = validate-pr
  • check-skipped = validate-pr
• any of [🛡 GitHub branch protection]:
  • check-success = build
  • check-neutral = build
  • check-skipped = build

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.