Verify NodeLink EFS policy clears Access

PR #5593 (Task 6636) adds `elasticfilesystem:AccessedViaMountTarget = true` to every Allow in the NodeLink file-system policy. This should clear IAM Access Analyzer's "allows public access" findings on the prod store `fs-02769ebfe9f7010b7`. Prod only gets the new policy once both of these happen: - the develop→master promotion ships the change; - the policy is rewritten, either by the store's **Repair** in the console or by the next access-point change. Terraform ignores `policy`, so an apply will not rewrite it. After the promotion: 1. Run Repair on the prod store. 2. Confirm that every Allow carries the condition. 3. Confirm that the two Access Analyzer findings (prod analyzer and org analyzer) resolve. If they stay open, report what Access Analyzer still flags. Never fix it with `aws:PrincipalOrgID`: nodes mount with no IAM identity, so that condition locks every node out. Out of scope: changing mount options, access points, or the network path. Done means: - The prod store's file-system policy shows `elasticfilesystem:AccessedViaMountTarget` on every Allow. - Both EFS Access Analyzer findings are resolved or archived. - Nodes still mount their NodeLinks: the console shows the mounts as mounted after the Repair.

Prod got #5593 (master 3a3eebd, 1.2.809). Repair on Cisne's prod store fs-02769ebfe9f7010b7 added AccessedViaMountTarget to its only Allow. Both Access Analyzer findings RESOLVED; cisne1/2 still Mounted. Visual check done. Drafts #6689 (2 more flagged EFS), #6690, #6691 (false-red deploy).