feat(s3-types): add KMS service-control audit events

Configuration changes and service start/stop are management-plane actions
with no event name of their own, so they could not reach the audit
pipeline at all. Append three variants for them, following the existing
rule that KMS events are audit-only and live outside the `s3:` namespace,
so no bucket notification selector can expand to them.

crates/notify/src/rules/rules_map_test.rs

@@ -32,6 +32,9 @@ const KMS_EVENTS: &[EventName] = &[
     EventName::KmsKeyDeletionCancelled,
     EventName::KmsKeyDeleted,
     EventName::KmsKeyAccessed,
+    EventName::KmsServiceConfigured,
+    EventName::KmsServiceStarted,
+    EventName::KmsServiceStopped,
 ];
 
 fn test_target() -> TargetID {