[codex] Add real-pilot owner confirmation addendum

[InfoSecHack]

Summary

• Add a bounded Owner-Confirmation Addendum to the real-pilot dev-001 human-review summary.
• Record sanitized owner-inspection facts for five priority trust findings without committing raw get-role output, labels, account IDs, IAM/STS ARNs, or generated review artifacts.
• Clarify that the addendum strengthens the claim only to some findings corresponding to real trust policies worth owner review.

Boundaries

• Docs-only update to one case-study file.
• No live AWS, Terraform, raw artifacts, code, tests, score, pass/fail label, exploitation claim, production-readiness claim, or full-correctness claim.

Validation

• targeted grep for Owner-Confirmation Addendum, Principal, ExternalId, role names, and non-claims
• ./scripts/check.sh
• ./scripts/test_fast.sh
• git diff --check
• account/ARN hygiene scans
• Terraform/raw artifact scan