add tag to subnet, fix up vpc endpoints route53

• 2.8.2 -- 2023-04-18
  • subnets:
    • add boc:vpc:subnet_label
  • route53-zone-association/lambda-role
    • add ssm permissions
  • route53-zone-association/terraform-role
    • add ssm permissions
  • vpc-interface-endpoint
    • add additional information to ssm parameter
    • cleanup zone creation based on endpoint service definition (some are missing a zone)