Switch AWS credentials from a long-lived IAM user to short-lived role sessions

[tsibley]

I'll also be removing the corresponding repository secrets. Both that and this commit are required to effect the switch.

Related-to: https://github.com/nextstrain/private/issues/110

Checklist

• [x] Checks pass