chore(deps): bump io.github.cdklabs:cdknag in /infra/cdk

Bumps [io.github.cdklabs:cdknag](https://github.com/cdklabs/cdk-nag) from 2.38.2 to 3.0.1.
- [Release notes](https://github.com/cdklabs/cdk-nag/releases)
- [Commits](cdklabs/cdk-nag@v2.38.2...v3.0.1)

---
updated-dependencies:
- dependency-name: io.github.cdklabs:cdknag
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

infra/cdk/pom.xml

@@ -13,7 +13,7 @@
         <maven.compiler.target>25</maven.compiler.target>
         <cdk.version>2.235.0</cdk.version>
         <constructs.version>10.6.0</constructs.version>
-        <cdknag.version>2.38.2</cdknag.version>
+        <cdknag.version>3.0.1</cdknag.version>
         <junit.version>6.1.0</junit.version>
     </properties>