aws-ec2-imdsv2-audit — find the EC2 instances and launch templates still answering IMDSv1

Audits EC2 instances, launch templates and launch configurations for IMDSv1 still being reachable. Flags HttpTokens=optional, the templates that keep minting IMDSv1-capable instances, hop limits above 1, and metadata left enabled on hosts with no role. Prints the per-instance remediation call and exits non-zero in CI.