[AWS::Grafana::Workspace] - [Coverage] - kmsKeyId property not supported (present in CreateWorkspace API)

### Name of the resource

AWS::Grafana::Workspace

### Resource name

AWS::Grafana::Workspace

### Description

The CreateWorkspace API accepts kmsKeyId (String, 1–2048, pattern [a-zA-Z0-9:/_-]+) to encrypt the workspace with a customer managed AWS KMS key instead of an AWS-owned key. AWS::Grafana::Workspace exposes no encryption-key property, so customers with CMK/BYOK compliance requirements cannot provision Grafana workspaces via CloudFormation.

API reference: https://docs.aws.amazon.com/grafana/latest/APIReference/API_CreateWorkspace.html (kmsKeyId)
CFN resource reference (property absent): https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-grafana-workspace.html

### Other Details

_No response_

Start with the linked CreateWorkspace API reference and the AWS::Grafana::Workspace CloudFormation resource reference, comparing the kmsKeyId API parameter with the resource's available properties. Done means the resource exposes kmsKeyId with the documented constraints and supports provisioning a workspace encrypted with a customer-managed KMS key.

Written by the indexing model from the issue text.