Update CloudTrail validate-logs for full key query range

[IanLeeYT]

Issue #, if available:
N/A
Description of changes:
There exists an edge case in the CloudTrail validate-logs command where the script fails to query all CloudTrail public keys to validate the digest signature. It can happen when the command end time lands right after the rotation instant. Fix is to add a two hour buffer period.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.41%. Comparing base (c4681b5) to head (97b1f5a).
⚠️ Report is 115 commits behind head on develop.

Additional details and impacted files

@@             Coverage Diff             @@
##           develop   #10072      +/-   ##
===========================================
+ Coverage    93.39%   93.41%   +0.02%     
===========================================
  Files          210      210              
  Lines        17052    17127      +75     
===========================================
+ Hits         15925    15999      +74     
- Misses        1127     1128       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.