feat(terraform): add check for tf module versioned tag

[mikeurbanski1]

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Description

Adds a more lenient version of CKV_TF_1

Fixes # (issue)

New/Edited policies (Delete if not relevant)

Description

CKV_TF_1 is the best and most secure way to define a module. However, it is cumbersome, and a reasonable middle ground is to specify a ref that is a versioned tag. This is at least more secure than a branch. This check ensures that the ref at least looks like a version. It also passes if CKV_TF_1 passes.

Fix

How does someone fix the issue in code and/or in runtime?

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my feature, policy, or fix is effective and works
• New and existing tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules

[tsmithv11]

🥂

[X-Guardian]

This introduces check CKV_TF_2

(added so that web searches for CKV_TF_2 will pick up this PR)