Update Checkov to 3.2.495

- Updated from 3.2.108 to 3.2.495
- Added 82 new rules with editorial review
- 3 rules removed by upstream (CMK rotation, IBM DB, GitLab 2FA)
- New rules include AWS SageMaker, Bedrock, Synapse, Tencent Cloud
- CMK-only rules marked as hardened-only (not baseline)
- High-value public access rules added to baseline

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: fproulx-boostsecurity

scanners/boostsecurityio/checkov/module.yaml

@@ -14,7 +14,7 @@ steps:
   - scan:
       command:
         docker:
-          image: bridgecrew/checkov:3.2.108@sha256:e9aff6a7de5ec7b0434809a5955e639ccb3a5d48e6e8327059a5555c2003440a
+          image: bridgecrew/checkov:3.2.495@sha256:4c2c3b67f09867ef2843a03d8ba82adf712eb93ea3584c1708c24ed584f6da17
           command: --directory . --output json --soft-fail --quiet --skip-download --skip-framework secrets
           workdir: /src
       format: sarif