feat(logs-destinations): support Amazon Data Firehose logs destination (#33683)

### Issue # (if applicable)

Closes #32038.
Closes #24766.

### Reason for this change

Adding support of Amazon Data Firehose destination was waiting for stabilize aws-kinesisfirehose.

### Description of changes

Added the `FirehoseDestination` logs destination class.
Usage:
``` ts
declare const logGroup: logs.LogGroup;
declare const stream: firehose.DeliveryStream;

new logs.SubscriptionFilter(stack, 'SubscriptionFilter', {
  logGroup,
  destination: new destinations.FirehoseDestination(stream),
  filterPattern: logs.FilterPattern.allEvents(),
});
```

### Describe any new or updated permissions being added

Following permissions will be granted to a role of destination.
https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters.html#FirehoseExample

### Description of how you validated changes

Unit tests and integ test.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*

Author: Tietew