aws-ecs: No way to override aws-for-fluent-bit image

### Describe the feature

I'm currently using the aws firelens log router on an ECS container, like so:

```
new ApplicationLoadBalancedFargateService(this, 'Backend', {
cluster,
// ... removed for brevity
taskImageOptions: {
// ... removed
logDriver: LogDrivers.firelens({
options: {
// .. removed for brevity
},
}),
```

However, a recent issue with the container caused ECS services to recycle tasks non-stop:
https://github.com/aws/aws-for-fluent-bit/issues/491

There doesn't appear to be any way to override the image tag that will be used when using this construct.

I also don't see a way to use an escape hatch or other method to choose a different SSM parameter for the log driver to use.

What is the recommended way to override the tag being used? Could an additional property be exposed on the LogDrivers.fireLens() to allow the setting of the tag?

### Use Case

I'd like to be able to control the tag of the aws-for-fluent-bit image.

### Proposed Solution

I don't have one.

### Other Information

_No response_

### Acknowledgements

- [X] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CDK version used

2.53.0

### Environment details (OS name and version, etc.)

-

Start at the TypeScript implementation of LogDrivers.firelens and trace how the ECS firelens configuration selects the aws-for-fluent-bit image or SSM parameter. Verify the generated task definition and existing behavior, then ensure users can choose the image tag or parameter and confirm the selected value is emitted.

Written by the indexing model from the issue text.