chore(ec2): add SES interface VPC endpoint

[badmintoncryer]

Issue # (if applicable)

None

Reason for this change

AWS SES now supports for private access via interface VPC endpoint.
https://aws.amazon.com/jp/about-aws/whats-new/2025/12/amazon-ses-vpc-api-endpoints/

Description of changes

Add SES interface VPC endpoints

Describe any new or updated permissions being added

None

Description of how you validated changes

❯ aws ec2 describe-vpc-endpoint-services --filters Name=service-type,Values=Interface Name=owner,Values=amazon --region us-east-1 --query ServiceNames | grep email         
    "com.amazonaws.us-east-1.email",
    "com.amazonaws.us-east-1.email-fips",

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[aws-cdk-automation]

(This review is outdated)

[github-actions]

	Tests	Passed ❌️	Skipped	Failed
Security Guardian Results	0 ran	0 passed	0 skipped	0 failed

Test	Result
No test annotations available

• View Security Guardian Results

[github-actions]

	Tests	Passed ❌️	Skipped	Failed
Security Guardian Results with resolved templates	0 ran	0 passed	0 skipped	0 failed

Test	Result
No test annotations available

• View Security Guardian Results with resolved templates

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.