Assert Terraform Plan JSON Without Brittle Snapshots

Test stable Terraform plan invariants instead of snapshotting volatile provider output, while handling replacements, unknown values, and sensitive data safely.