[breaking] [feature] aws-iam-instance-profile reuse existing role and remove SSM support

[mbarrien]

Summary

• Allows passing an existing role to aws-iam-instance-profile, and the module will attach whatever permissions are needed. This allows using roles that are created and managed by other modules (e.g. EKS worker role), but provides ability to attach a standard set of permissions to that role. It will still always create the instance profile, even if the profile will be unused.
• Removes unused permissions from the aws-iam-instance-profile module for using SSM.

Test Plan

Already in use in CZI internal playground deployment.