Infrastructure Drift Detection

Finding the gap between declared and running infrastructure: rotated console ports, undeclared listeners, and floating image tags where policy wants pins.