Review and fix Security Hub findings

Review Security Hub findings (jaah security account), especially from the standards and fix top 5 that would close the gap the most

Security Hub review (security acct, both regions): 0 open failed FSBP/CIS findings, both scores 100%; all 93 failures are rule-backed owner-accepted risks. Open items: 2 MEDIUM Inspector zlib on self-patching hosted nodes, 1 INFO already patched on the host, 2 AWS Health notices. Nothing to fix; no_pr. Memory: used mem-15203; proposed 1 recipe.