chore: refactored security guardian tool and security-guardian action. Enables local run.

[QuantumNeuralCoder]

Issue # (if applicable)

None
Closes #.
NA

Reason for this change

With this change, developers can locally run security guardian against committed files to detect changed .template.json and run the 2 part scanner

1. cfn-guard to detect inline
2. custom scanner to detect intrinsics

Please note that this will detect templates where the developer has explicitly provided broadened scope permissions like
new AccountPrincipal();
We will use this as an opportunity to review if that is really needed or can be scoped down.

> cd tools/@aws-cdk/security-guardian
>yarn security-guardian 

Description of changes

Describe any new or updated permissions being added

Description of how you validated changes

Checklist

• [ x] My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[moelasmar]

can you also update the contributing readme to include the instructions to run this tool

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: f5129c1
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository