Thank you for mentioning that lifecycle rule change. I must have missed the announcement; that is exactly the functionality I needed.

Athena supports regexp_like(). By loading in an S3 inventory this can match what a wildcard would. Then a Batch Operations job can tag the result.

Not easy, but is possible and effective.