Scan the infrastructure definition before it's ever provisioned

Covers IaC scanning with tfsec/Checkov and maps the complete software supply chain to show every stage as a potential attack point.