[codex] add prod-like oracle fixture files

[InfoSecHack]

Summary

• Add the Phase 2 local prod-like AWS accuracy oracle fixture files.
• Freeze exactly 24 oracle rows with the designed 6/5/4/5/4 category breakdown.
• Add focused tests pinning fixture structure, metadata, unsupported/static-only handling, and hygiene boundaries.

Boundaries

• Local fixture/test only.
• No runner integration, code/reasoner changes, Terraform, live AWS, AWS CLI, STS/Lambda/API calls, iam:PassRole calls, benchmark semantic changes, release/version change, or new evidence claims.
• Unsupported rows stay static-only and are not counted as false positives, false negatives, extra findings, or missing findings.
• No composite benchmark score or pass/fail benchmark label.

Validation

• python -m pytest -q tests/test_prod_like_aws_accuracy_oracle_fixture.py
• account/ARN hygiene scans
• generated live/Terraform artifact scan
• ./scripts/check.sh
• ./scripts/test_fast.sh
• git diff --check