[AppSec] IaC and Runtime Security Correlation

Continuously scans deployed infrastructure, detects runtime misconfigurations and maps each one back to the IaC template that created it. Drift between templates and the real state (shadow resources, manual changes, untracked risks) is surfaced in a unified dev-to-prod view, and fixes are applied in code, manually or with AI autofix, so they propagate to every environment.