Create Matomo scan user using infra_ops lambda

[aloftus23]

🗣 Description

Create infraOps lambda to take care of all infrastructure tasks that cannot be completed in Terraform or serverless framework.

Add "Create Matomo scan user" to infraOps lambda so the vulnerability scanners can access our matomo schema.

The user will only be created if it doesn't already exist and the name/password are protected in the AWS Systems Manager parameter store.

The user is limited to these permissions:

Database Access:

• The user can connect to the database.

Schema Access:

• The user can access the public schema but cannot modify it.

Table Access:

• The user can query (read) all existing tables in the public schema.
• The user will also automatically have read access to any new tables created in the public schema in the future.

💭 Motivation and context

Allow scanners to access the database schema.

🧪 Testing

Created the user locally.
Passes pre-commit and github checks.

✅ Pre-approval checklist

• This PR has an informative and human-readable title.
• Changes are limited to a single goal - eschew scope creep!
• All future TODOs are captured in issues, which are referenced
  in code comments.
• All relevant type-of-change labels have been added.
• I have read the CONTRIBUTING document.
• These code changes follow cisagov code standards.
• All relevant repo and/or project documentation has been updated
  to reflect the changes in this PR.
• Tests have been added and/or modified to cover the changes in this PR.
• All new and existing tests pass.

✅ Pre-merge checklist

• Revert dependencies to default branches.
• Finalize version.

✅ Post-merge checklist

• Create a release.

[cduhn17]

LGTM - review done during PR review meeting

[rapidray12]

Approved