feat: comprehensive security, monitoring and code quality enhancements

[shashax42]

Overview

This update improves the module with enterprise-grade security, monitoring, and CI/CD quality gates, while keeping full backward compatibility. All new features are optional and configurable.

---

Security

• AWS Secrets Manager for secure secrets
• KMS key rotation & fine-grained access
• CloudTrail audit logging (optional)
• Automated scans: Checkov, tfsec, Trivy

---

Monitoring

• CloudWatch dashboards for real-time metrics
• Alarms for error rates, duration, throttling
• SNS notifications for critical issues
• Structured logs with retention policies

---

Code Quality & CI/CD

• Pre-commit hooks with multiple validators
• TFLint + ESLint for Terraform & JS
• GitHub Actions pipeline with security & quality checks
• Dependency scanning (npm audit, Snyk)

---

Validation

• Automated: terraform validate, fmt, security scans, linting
• Manual: resource deployment, dashboard checks, alert testing, Secrets Manager integration

---

Benefits

• Stronger security & compliance
• Better operational visibility & alerts
• Improved developer productivity & code quality