Add AWS storage backend support

[roger2hk]

Towards #109.

Here are some logs to show that the server can serve the get-roots and add-chain endpoints.

[ec2-user@ip static-ct]$ go run ./cmd/aws   --http_endpoint=localhost:6962   --roots_pem_file=./internal/testdata/fake-ca.cert   --origin=test-static-ct   --bucket=<REDACTED>-test-static-ct   --db_name=tesseract   --db_host=tesseract.cluster-<REDACTED>.us-east-1.rds.amazonaws.com   --db_port=3306   --db_user=tesseract   --db_password=tesseract   --dedup_path=test-static-ct
SDK 2025/03/20 17:08:20 WARN Response has no supported checksum. Not validating response payload.
I0320 17:08:20.185837   14738 aws.go:589] New tree: 0, e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
I0320 17:08:20.197186   14738 main.go:106] **** CT HTTP Server Starting ****
SDK 2025/03/20 17:08:21 WARN Response has no supported checksum. Not validating response payload.

[ec2-user@ip ~]$ curl -s localhost:6962/test-static-ct/ct/v1/get-roots | jq .
{
  "certificates": [
    "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"
  ]
}

[ec2-user@ip static-ct]$ go run github.com/google/certificate-transparency-go/client/ctclient@master upload --cert_chain=/tmp/httpschain/chain.pem --skip_https_verify --log_uri=http://localhost:6962/test-static-ct/
W0320 17:33:21.947573   16182 root.go:93] Skipping HTTPS connection verification
Uploaded chain of 1 certs to V1 log at http://localhost:6962/test-static-ct, timestamp: 1742492001949 (2025-03-20 17:33:21.949 +0000 UTC)
LogID: 1338de5de5246680e3d603795daf7eec61d9222028e9621b2eb3a4fb540a3c39
LeafHash: a3fa1d3dea3898490d837b0f9efe10dd328be3da7260446e07e7ed53cd6e74d9
Extensions: 0000050000000000
Signature: Signature: Hash=SHA256 Sign=ECDSA Value=736967

[phbnf]

Do you know why this is added?

[roger2hk]

➜  static-ct git:(aws) go mod graph | grep filippo.io/edwards25519 
github.com/transparency-dev/static-ct filippo.io/edwards25519@v1.1.0
github.com/go-sql-driver/mysql@v1.9.0 filippo.io/edwards25519@v1.1.0
github.com/transparency-dev/trillian-tessera@v0.1.2-0.20250320160837-ae724376e1ac filippo.io/edwards25519@v1.1.0

➜  static-ct git:(aws) go mod why filippo.io/edwards25519
# filippo.io/edwards25519
github.com/transparency-dev/static-ct/cmd/aws
github.com/go-sql-driver/mysql
filippo.io/edwards25519