Add corrected prod-like v3 i001 checkpoint

[InfoSecHack]

Summary

• Add a sanitized corrected v3 prod-like sandbox collect-and-compare checkpoint after the oracle-i-001 fixture correction.
• Record Terraform lifecycle, v3 collection shape, corrected comparator summary, oracle-i-001 match as inconclusive, cleanup verification, artifact hygiene, supported claim, and non-claims.
• Preserve explicit boundaries: docs/spec only, no raw artifacts, no account IDs/ARNs, no live AWS or Terraform in this PR.

Corrected evidence recorded

• Terraform apply/destroy: 41 added, 41 destroyed
• Scenario shape: 45 nodes, 103 edges, 14 constraints, 24 edge_constraints
• Findings: 20 total, 3 validated, 2 blocked, 15 inconclusive
• Patterns: 16 passrole_lambda, 4 passrole_ecs
• Comparator: oracle_match=6, oracle_mismatch=0, environmental_extra=12, unmapped_sandbox_extra=2, not_currently_live_comparable=14, unsupported_static_only=4
• oracle-i-001: matched as inconclusive for iamscope-prodlike-v1-uncertainty-resource-probe -> iamscope-prodlike-v1-lambda-exec-scoped

Validation

• targeted checkpoint fact/non-claim grep: passed
• account/ARN hygiene scans: clean
• Terraform/raw artifact scan: clean
• ./scripts/check.sh: passed
• ./scripts/test_fast.sh: 1999 passed
• git diff --check: passed