Security Fixes for AWS-action-runner-controller blueprint

[avx-manpreetsingh]

Added whitelisting of IP addresses, Changed auth mode to API, Modified github auth to use github apps instead of PAT

Description

Added whitelisting of IP addresses to access eks endpoint which is public
Changed EKS auth mode to API instead of API and Configmap
Modified github auth to use github apps instead of PAT (Personal Access Tokens)

Type of Change

• New blueprint
• Blueprint enhancement
• [] Bug fix
• Documentation update
• CI/CD improvement
• Other (describe):

Blueprint Checklist (for new or modified blueprints)

Documentation

• README.md includes all required sections (see Blueprint Standards)
• Architecture diagram is included and accurate
• All variables are documented with descriptions
• terraform.tfvars.example includes all required variables
• Test scenarios are documented
• Troubleshooting section covers common issues

Code Quality

• terraform fmt passes
• terraform validate passes
• No hardcoded values (use variables)
• Sensitive variables marked as sensitive = true
• Resource naming uses var.name_prefix

Testing

• Full deploy/destroy cycle tested
• All test scenarios verified
• Tested on documented Control Plane version(s)
• Cleanup leaves no orphaned resources

Catalog Update

• Blueprint added to catalog in root README.md (for new blueprints)

Control Plane Version Tested

• Control Plane version:

Cloud Environment

• Cloud provider(s):
• Region(s) tested:

Screenshots / Architecture

Additional Notes

---

By submitting this PR, I confirm that:

• I have read the Contributing Guide
• This PR does not include sensitive information (credentials, keys, etc.)
• I am willing to respond to review feedback