[plan] Security audit of development keys and container artifacts

_Automatically composed from the parent epic at dispatch time._

Split along the Architect's C1–C9 boundaries into 9 coder children in 3 phases: Hardening (7 concurrent), CE prune (the aws cut waits on 3 and 4), and Name scrub. The critic's MAJOR finding (cloud AC4.5 on the aws cut) was fixed before the append. Acceptance was tightened against guard theatre and console closure. Memory: none applied.