fix: Add all VPC CIDRs to VPCe config

[alanty]

What does this PR do?

Adds the public subnet CIDR blocks to the security group on the VPC endpoints and adds the S3 gateway endpoint to the Public route table.

Motivation

I launched an instance in the Spark operator VPC to use as a bastion instance and selected the Public subnets but the SSM agent on the instance never connected. I think when the vpc endpoints are enabled, the SSM endpoint overrides the DNS for the service, but the Security group blocks traffic from the public subnet.

This shouldn't cause a problem for our examples/eks nodes as we don't really leverage the Public subnet but was annoying to debug.

More

• Yes, I have tested the PR using my local account setup (Provide any test evidence report under Additional Notes)
• Mandatory for new blueprints. Yes, I have added a example to support my blueprint PR
• Mandatory for new blueprints. Yes, I have updated the website/docs or website/blog section for this feature
• Yes, I ran pre-commit run -a with this PR. Link for installing pre-commit locally

For Moderators

• E2E Test successfully complete before merge?