kOps doesn't tag API server NLBs

/kind feature

The ENIs that AWS provisions for the API server NLB (description ELB net//...) are not tagged by kOps, unlike the rest of the cluster's networking resources. It would be great if kOps could apply tags to them.

Start by tracing kOps's AWS API server NLB handling and compare it with the existing tagging logic for cluster networking resources. Confirm which ENIs have descriptions matching ELB net//... and verify that the intended tags are applied to those ENIs without changing other resources.

Written by the indexing model from the issue text.