CloudFront recovery console

First-class governed Amazon CloudFront recovery-action lifecycle. The Detect → Decide → Approve → Act → Verify flow lives at/cloudfront-recovery/<incidentId>; the test-fixture button below seeds a per-user fixture incident.

Idempotent — re-running converges. Requires ENABLE_TEST_FIXTURES=1.