Use EC2's tag-on-create for various resources

[rifelpet]

This updates DHCP Options, EBS Volumes, InternetGateways, SecurityGroups, Subnets, and VPCs to specify tags at creation-time rather than calling ec2.CreateTags after the resource was created.

I didn't update NATGateway because it adds additional legacy tags that should be evaluated for whether or not they're needed.
I also didn't update SSHKey because it currently isn't tagged at all but it would be good for us to tag down the road.

Note each of the tasks' RenderAWS functions still calls t.AddAWSTags() which reconciles tags for resources that were either just created or already exist. I kept that in because:

1. Any resources that are shared (DHCP Options, Internet Gateways, Subnets, VPCs) will need their tags reconciled even though Kops never creates those resources.
2. If we ever add or change the tags intended for these resources, we'll need those reconciled on resources that already exist rather than only newly created resources going forward.

For newly created resources, t.AddAWSTags() will be a no-op.

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: rifelpet

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [rifelpet]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[hakman]

/lgtm