fix: apply global tags to Config Rules and CloudWatch Log Groups

[jtaylortech]

*Issues, #907 & #891

This PR ensures global tags and LZA accelerator tags are consistently applied to AWS Config Rules and CloudWatch Log Groups created by custom resources.

Problem:
Two related tagging issues were identified:

1. AWS Config Rules do not receive global tags or the LZA Accelerator tag, creating a security gap where rules can be modified/deleted without proper SCP controls
2. CloudWatch Log Groups created by custom resources (e.g., SecurityHub events) do not receive global tags

Solution:
This PR implements consistent tagging across both resource types:

Config Rules (#907):

• Modified setupConfigServicesTagging() in security-resources-stack.ts to include:
  • Global tags from globalConfig.tags
  • LZA Accelerator tag (Accelerator: <prefix>)
  • Rule-specific tags (which can override global tags)
• Ensures all Config Rules have proper tags for SCP-based access controls

CloudWatch Log Groups (#891):

• Updated SecurityHubEventsLog construct to pass tags to custom resource
• Enhanced security-hub-event-log lambda handler to accept and apply tags
• Enhanced create-log-groups lambda handler to accept and apply tags
• Modified securityHubEventForwardToLogs() to prepare and pass global + accelerator tags

Files Changed:

• security-resources-stack.ts: Config Rules tagging + SecurityHub log group tags
• security-hub-events-log.ts: Added tags property to interface and passed through
• security-hub-event-log/index.ts: Lambda handler accepts and applies tags
• create-log-groups/index.ts: Lambda handler accepts and applies tags

Testing:

• Code compiles without TypeScript errors
• Maintains backward compatibility (tags are optional)
• Existing behavior preserved when tags are not provided

Benefits:

• Closes security gap for Config Rules SCP controls
• Consistent tagging across all LZA-created resources
• Improved compliance and governance

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.