Expand Fargate, DynamoDB, IAM, and schema validation

[satyakigh]

Summary

• Add condition-aware ECS Fargate validation:
• Extend E3047 for supported CPU and memory combinations, including documented unit formats.
• Add E3048 for required task-definition properties, network mode, placement constraints, and supported log drivers.
• Add E3639 to require ProvisionedThroughput when a DynamoDB table uses, or defaults to, PROVISIONED billing.
• Strengthen E3039 validation across table, global secondary index, and local secondary index key schemas.
• Expand E3510 identity-policy validation across managed policies, inline IAM policies, and SSO permission sets. Retire E3514, W3515, and E9005 in favor of the
  consolidated rule.
• Improve structural and reference diagnostics for lifecycle policies, mapping names, top-level sections, output references, custom resources, and module resource types.
• Centralize condition-aware Fargate, IAM, route-table association, and primary-identifier analysis in template-model so both engines share the same behavior.
• Prevent cascading diagnostics from malformed conditions and unresolved dynamic values.
• Enrich schema composition diagnostics with structured branch-failure context and analysis-budget handling.
• Improve comparison normalization for diagnostics outside the Resources section.