[FEATURE] Make KMS key rotation configurable instead of hardcoded "true".

[ditahkk]

Feature Description

Make KMS key rotation configurable instead of hardcoded "true".

Use Case

Some customers may have compliance requirements that prohibit automatic key rotation or prefer manual rotation schedules.

Proposed Solution

Add EnableKMSKeyRotation parameter (default: true) to control the EnableKeyRotation property.

Additional Context

Files: template.yaml (line ~207)
AC:

• Parameter added
• KMS key uses parameter
• Default maintains current security posture