Audit borrowing/lifetimes on Rust APIs

[robin-aws]

This is hopefully a non issue since we mostly copied what smithy-rs does, but it is important to make any tweaks to this before GA to ensure we maximize our ability to optimize away clones later on without breaking customers.