feat: add extra submodule for ec2_deployment

[edersonbrilhante]

Description

This PR introduces new EC2-related maintenance Lambdas and integrates them into the existing runner deployment, plus adds Splunk parsing for the new trust validator Lambda logs.

Changes

• Added ec2_update_runner_ssm_ami submodule to periodically resolve and update runner AMI IDs in SSM based on runner_specs (using ami_filter and ami_owners), with a scheduled Lambda and appropriate IAM permissions.
• Added ec2_redrive_deadletter submodule and Lambda to redrive messages from EC2 runner SQS DLQs back into their main queues; sqs_map is built dynamically from runner_configs.runner_specs.
• Added ec2_update_runner_tags submodule to standardize/refresh tags on EC2 runner resources (driven by the same runner configuration).
• Extended Splunk Cloud transforms for Forge CICD to recognize the new Lambda names and extract structured fields - - - Removed deprecated/legacy Lambda code that is superseded by the new EC2 maintenance modules.

Type of Change

• Bug Fix
• New Feature
• Breaking Change
• Refactor
• Documentation
• Other (please describe)

Checklist

• I have read the contributing guidelines
• Existing issues have been referenced (where applicable)
• I have verified this change is not present in other open pull requests
• Functionality is documented
• All code style checks pass
• New code contribution is covered by automated tests
• All new and existing tests pass