feat(kms): add bypassPolicyLockoutSafetyCheck property

[maczac150]

Issue # (if applicable)

None

Reason for this change

AWS KMS supports bypassing the key policy lockout safety check via the BypassPolicyLockoutSafetyCheck parameter (Link).
This feature was not previously configurable in the AWS CDK L2 construct.

Description of changes

• Added bypassPolicyLockoutSafetyCheck to KeyProps and threaded it through to CfnKey.
• Documented the property with security warnings and usage examples in README.

Describe any new or updated permissions being added

None – This property only affects how AWS KMS performs its key policy lockout safety check, and does not introduce any new permissions or access scope changes.

Description of how you validated changes

• Added unit tests covering all three cases (true/false/undefined)
• Added integration test demonstrating all three scenarios

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[go-to-k]

Thanks for your contribution. Left some minor comments

[maczac150]

Thank you for the review. I'll make the suggested changes and commit them shortly.

[maczac150]

I’ve committed all three suggested changes. Thank you again for the feedback.

[go-to-k]

Thanks for the changes.

[aws-cdk-automation]

This PR cannot be merged because it has conflicts. Please resolve them. The PR will be considered stale and closed if it remains in an unmergeable state.