fix(query): resolve false positive on API Gateway access logging

[cx-prathmesh-borle]

Closes #7466

Reason for Proposed Changes

• The KICS query 80d45af4-4920-4236-a56e-b7ef419d1941 (API Gateway V2 Stage Access Logging Settings Not Defined) produces false positives on CloudFormation templates because 3 Rego rules access MethodSettings as a flat object (properties.MethodSettings.LoggingLevel) instead of iterating it as an array;
• The AWS CloudFormation documentation defines MethodSettings as a List of MethodSetting, meaning it is always an array of objects (e.g., MethodSettings[0].LoggingLevel), not a single object;
• This caused two problems:
  • False positives: Templates with correctly configured logging were flagged because the object-access pattern (MethodSettings.LoggingLevel) silently failed to match array elements;
  • Incorrect searchKey/searchLine: When results were generated, the searchKey paths did not include the array index (e.g., MethodSettings.LoggingLevel instead of MethodSettings[0].LoggingLevel), making it difficult to identify which method setting was affected;

Proposed Changes

• Updated 3 Rego rules in query.rego to iterate over MethodSettings as an array using properties.MethodSettings[j] instead of accessing properties.MethodSettings directly:
  • Rule: LoggingLevel missing - checks not common_lib.valid_key(methodSetting, "LoggingLevel") per array element;
  • Rule: LoggingLevel empty - checks properties.MethodSettings[j].LoggingLevel == "" per array element;
  • Rule: LoggingLevel OFF - checks properties.MethodSettings[j].LoggingLevel == "OFF" per array element;
• Updated searchKey, keyExpectedValue, keyActualValue, and searchLine in all 3 rules to include the array index [j] for precise result identification;
• Updated 6 test files to use the correct array format per the CloudFormation spec:
  • positive6.json, positive10.json, positive12.json: Wrapped MethodSettings in array brackets;
  • positive14.yaml, positive16.yaml: Changed from MethodSettings.LoggingLevel to MethodSettings: - LoggingLevel (YAML list syntax);
  • negative3.json, negative4.yaml: Corrected to array format to ensure negative tests validate the updated logic;
• Updated positive_expected_result.json to reflect corrected line numbers and removed stale entries from positive11.yaml that no longer apply;

I submit this contribution under the Apache-2.0 license.