Bug fixes

• The Athena CloudWatch event patterns generated by the AWS > Turbot > Event Handlers stack previously ignored the AWS > Athena > Named Query > CMDB policy. Because that policy targets the workgroup rather than the region, disabling it at the region or account level had no effect and Guardrails kept forwarding named query events (CreateNamedQuery, DeleteNamedQuery). The event patterns now read the effective per-workgroup CMDB value, so the named query events are only forwarded when at least one workgroup in the region still has the CMDB enabled.