Show the region in cdk diff output

### Describe the feature

When using certain resources, like [DnsValidatedCertificate](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_certificatemanager.DnsValidatedCertificate.html) in account-agnostic stacks, it is hard to see that CDK is creating resources in another region than the one used from session credentials.

```
Resources
[-] AWS::CertificateManager::Certificate DnsCert DnsCertAE0D6152 destroy
[+] AWS::IAM::Role DnsCertUsEast1/CertificateRequestorFunction/ServiceRole DnsCertUsEast1CertificateRequestorFunctionServiceRole627053D3
[+] AWS::IAM::Policy DnsCertUsEast1/CertificateRequestorFunction/ServiceRole/DefaultPolicy DnsCertUsEast1CertificateRequestorFunctionServiceRoleDefaultPolicy92612D42
[+] AWS::Lambda::Function DnsCertUsEast1/CertificateRequestorFunction DnsCertUsEast1CertificateRequestorFunctionFB5F3D25
[+] AWS::CloudFormation::CustomResource DnsCertUsEast1/CertificateRequestorResource DnsCertUsEast1CertificateRequestorResource66E6D6B8
[~] AWS::ApiGatewayV2::DomainName DnsDomain DnsDomainC6F5001E
```

Currently, the only way to see this is by really analysing all the resources and spotting the `DnsCertUsEast1` construct name.

By default / or in such case (when an env-agnostic stack app is in play) / or by a cdk CLI flag, I would like to be able to see an output like this:

```
[+] (us-east-1) AWS::CloudFormation::CustomResource DnsCertUsEast1/CertificateRequestorResource DnsCertUsEast1CertificateRequestorResource66E6D6B8
```

or even:

```
Resources (us-west-2)
[-] AWS::CertificateManager::Certificate DnsCert DnsCertAE0D6152 destroy
[+] AWS::IAM::Role DnsCertUsEast1/CertificateRequestorFunction/ServiceRole DnsCertUsEast1CertificateRequestorFunctionServiceRole627053D3
[+] AWS::IAM::Policy DnsCertUsEast1/CertificateRequestorFunction/ServiceRole/DefaultPolicy DnsCertUsEast1CertificateRequestorFunctionServiceRoleDefaultPolicy92612D42
[~] AWS::ApiGatewayV2::DomainName DnsDomain DnsDomainC6F5001E

Resources (us-east-1)
[+] AWS::CloudFormation::CustomResource DnsCertUsEast1/CertificateRequestorResource DnsCertUsEast1CertificateRequestorResource66E6D6B8
[+] AWS::Lambda::Function DnsCertUsEast1/CertificateRequestorFunction DnsCertUsEast1CertificateRequestorFunctionFB5F3D25

```

This is an important thing to see, because for example, the AWS Organisation SCPs might block developers from deploying into non-company-default region.

### Use Case

as above.

### Proposed Solution

as above.

### Other Information

_No response_

### Acknowledgements

- [x] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CDK version used

2.1003.0 (build b242c23)

### Environment details (OS name and version, etc.)

MacOS