aws-systems-discovery overview

End-to-end AWS account discovery, system attribution, EKS deep-dive, ALB/NLB target attribution, external exposure map (Route53, CloudFront, public ALBs, EIPs, API Gateway, Lambda Function URLs, S3 public ACLs/policies), and per-system mermaid topology. All tasks are agent-driven; there is no inter-task filesystem contract — agents self-manage working state under their task-scoped directory and pass typed results forward as JSON. The caller controls where the final reports land via `inputs.outputDir`.