Fix validator false positives and runtime lifecycle messages

[satyakigh]

Summary

This change fixes two confirmed validator false positives, adds service-grounded handling for undocumented parameter types, and corrects runtime lifecycle message grammar.

Changes

Remove confirmed false positives

• Deduplicate IAM identity-policy findings when multiple scenarios render the same authored root PolicyDocument type defect.
  • Distinct conditional branch defects remain separate.
• Stop treating the format of AWS::SNS::Topic.KmsMasterKeyId as a Fatal schema constraint.
  • CloudFormation successfully created an SNS topic using the previously rejected identifier, proving that SNS accepts it as an opaque runtime value.

Handle undocumented parameter types accurately

Add W2002 for undocumented AWS-shaped parameter types that CloudFormation accepts without validating their values, including:

• AWS::SSM::Parameter::Value<AWS::Service::Type>
• AWS::SSM::Parameter::Value<List<AWS::Service::Type>>
• List<AWS::Service::Type>

Correct runtime lifecycle grammar

Runtime lifecycle messages now use tense appropriate to the embedded lifecycle band:

• Deprecated: creation and updates will be disabled
• Create-blocked: creation was disabled, updates will be disabled
• End-of-life: creation was disabled, updates were disabled