Add bounded real-environment pilot protocol

[InfoSecHack]

Summary

• Add a bounded real-environment pilot protocol for external AWS/IAM reviewers.
• Emphasize read-only, collection-focused testing; sensitive artifact handling; and reviewer judgment over scores.
• Preserve explicit non-claims: no production readiness, no broad correctness, no exploitability proof, no composite score, and no pass/fail benchmark label.

Validation

• Targeted grep for pilot scope, access model, sanitization, success criteria, and non-claims: passed
• Account/ARN hygiene scans: clean
• Terraform/raw artifact scan: clean
• ./scripts/check.sh: passed
• ./scripts/test_fast.sh: 1999 passed
• git diff --check: passed