Fix Top 5 Security Hub Findings

Review Security Hub findings (jaah security account), especially from the standards and fix top 5 that would close the gap the most

Reviewed Security Hub (85 open failed, 21 controls). Fixed 5: IAM.2 (CIS now 0 failing), S3.9 logging, EC2.9/EC2.180/EC2.15 suppressions on accepted risks → 75 open, 0 HIGH. PR #5373 merged, full gate green, Jaah Deploy success. Rest deferred in report; mem-2 used.