add action to PreventNonVPCDeploymentSageMaker

[ach-mk]

The objective of this PR is to update the SID PreventNonVPCDeploymentSageMaker in data_perimeter_governance_policy_2.json to add the action sagemaker:CreateCluster.

This action allows the creation of a SageMaker HyperPod cluster and supports the condition key sagemaker:VpcSubnets as described in the service authorization reference for Amazon SageMaker.

Note that the action sagemaker:UpdateCluster also supports the condition key sagemaker:VpcSubnets, but it is not required in this statement. This action only allows customizing the VPC configuration of instance groups, not the default VPC configuration of the cluster.

This update helps ensure that SageMaker HyperPod clusters are created within expected networks.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[tatyatsk]

Updates to the policy meet the standard requirements. Thank you for your contribution. Good to publish.