chore: Release 3.2.4

[weklund]

Describe your changes

Added

• added permission boundary as optional input to all modules
• added optional s3_access_logs_bucket_arn parameter to sagemaker-templates and sagemaker-model-cicd modules for S3 access logging (CT.S3.PR.2 Control Tower compliance)

Changed

• fixed sagemaker-templates Model Deploy seed code S3 permission race condition where grant_read_write() on an imported bucket created a DefaultPolicy with no CloudFormation dependency from the SageMaker Model, causing intermittent s3:GetObject access denied errors
• consolidated redundant DevStage/PreProdStage/ProdStage classes into a single DeployStage in sagemaker-templates model deploy seed code, fixing redundant CF stack names (e.g. dev-dev-endpoint → dev-{project}-endpoint) and adding project uniqueness to prevent cross-project collisions

Issue ticket number and link

Checklist before requesting a review

• I updated CHANGELOG.MD with a description of my changes
• If the change was to a module, I ran the code validation script (scripts/validate.sh)
• If the change was to a module, I have added thorough tests
• If the change was to a module, I have added/updated the module's README.md
• If a module was added, I added a reference to the module to the repository's README.md
• I verified that my code deploys successfully using seedfarmer apply

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.