The aws.rds.Instance instances in prod should be protected.
The one for redash is missing the protected flag.
You can add this as the 3rd argument (see the other instances):

  { protect: true }

Also, we might want to protect all instance in staging as well, I don't see any reason not do do this.

Also we might drop the "scorer-run-createsuperuser" task as we do not use that.