iam-access-key-age — fail CI on stale AWS IAM access keys

Flag stale or never-used AWS IAM access keys and fail CI before an old credential becomes a breach.