Update duvet scripts to use a duvet config

[goatgoose]

Problem:

s2n-tls currently uses its own scripts to run duvet: https://github.com/aws/s2n-tls/tree/73720795dbc37d295592f427e8c225cfafef39a0/compliance

duvet can now be more easily configured with a config file: awslabs/duvet#152. We should update the s2n-tls duvet action/scripts to use a duvet config.

Solution:

Update our duvet action to use a duvet config. See #5055 for an attempt at this.

Requirements / Acceptance Criteria:

In accomplishing this, we should add proper testing to ensure that we don't lose any coverage (see #5055 (review)).