Improve remediation testing in router_test

[singlethink]

• Ensure that remediation security marks are updated when each unremediated finding is processed

• Ensure that remediation security marks are not updated when each remediated finding is processed

• Add missing test case for remediated bucket_policy_only_disabled findings