Enable OpenSearch error logging to CloudWatch

[nickclyde]

Summary

Closes #372

• Adds log_publishing_options to the OpenSearch domain for ES_APPLICATION_LOGS, INDEX_SLOW_LOGS, and SEARCH_SLOW_LOGS
• Creates three CloudWatch log groups with 14-day retention
• Adds a CloudWatch log resource policy allowing the OpenSearch service to write logs

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.78%. Comparing base (d031555) to head (6550637).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #426   +/-   ##
=======================================
  Coverage   95.78%   95.78%           
=======================================
  Files          42       42           
  Lines        2183     2183           
=======================================
  Hits         2091     2091           
  Misses         92       92           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.