feat: Add Security Hub enabling via Lambda

[carlosmmatos]

Existing method would fail if security hub was already enabled, killing the whole cft pipeline. This uses the api to enable security hub, and will properly handle exceptions, such as already enabled, without failing