Image: Lockfile Drift Before Terraform Upgrade

Before Terraform v1.15.4 reaches production, inspect the lockfile. Provider drift and runner-image drift create more rollout risk than the version bump itself. Canary the exact CI path and save both