feat(aws): add new check cloudformation_stack_cdktoolkit_bootstrap_version

[MrCloudSec]

Context

This PR introduces a new check cloudformation_stack_cdktoolkit_bootstrap_version to validate the BootstrapVersion of CDKToolkit CloudFormation stacks. Ensuring the version is at least 21 helps mitigate risks like bucket takeover or privilege escalation, thanks @jchrisfarris for the idea!

Description

• The check identifies CDKToolkit stacks and validates their BootstrapVersion output.
• Flags stacks as FAIL if the version is below 21 or missing.
• Includes unit tests covering valid, invalid, and missing BootstrapVersion scenarios.

Checklist

• Are there new checks included in this PR? Yes / No
  • If so, do we need to update permissions for the provider? Please review this carefully.
• Review if the code is being covered by tests.
• Review if code is being documented following this specification https://github.com/google/styleguide/blob/gh-pages/pyguide.md#38-comments-and-docstrings
• Review if backport is needed.

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 90.09%. Comparing base (db5481c) to head (c45f24c).
Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #6323      +/-   ##
==========================================
- Coverage   90.12%   90.09%   -0.04%     
==========================================
  Files        1182     1183       +1     
  Lines       36315    36342      +27     
==========================================
+ Hits        32728    32741      +13     
- Misses       3587     3601      +14     

Flag	Coverage Δ
prowler	90.09% <100.00%> (-0.04%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Components	Coverage Δ
prowler	90.09% <100.00%> (-0.04%)	⬇️
api	∅ <ø> (∅)