Add IAM credentials report data collector

[vmindru]

Issue #, if available:

Description of changes:

• Add CID IAM credential report collection module

• Add iam-credential-report data collection module
• Collect IAM credential reports per linked account
• Store daily CSV snapshots partitioned by account_id/report_date
• Add Glue table for Athena access
• Add Athena saved query for QuickSight view with date normalization
• Wire module into data collection and read-permission stacks
• Add linked-account IAM permissions for credential report APIs
• Document module in data-collection README
• Fix DeployAccountCollector Fn::Or grouping limit

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[veaceslav-mindru]

@yprikhodko :) this one needs a bit of ❤️ :)