Create example cloudformation for bastion

Created by: aidansteele

• Use NLB for HA across three AZs
• Route 53 domain
• Host-key signed
• Port-forwarding only
• Generate example authoriser that emits bastion info