fix: restore ADR-0007 invariant scan coverage for relocated domains (#1272)

The IAM, STS, RDS, EKS and ELBv2 relocations moved their packages out of
spinifex/handlers, which the S4, S6 and S7 network invariant scans still
walked, so those packages silently dropped out of the scans. Re-add their
new homes alongside domains/ecs. The checked rules are unchanged.

spinifex/domains/network/invariants/federation_isolation_test.go

@@ -37,6 +37,11 @@ func TestS6_FederationIsolated(t *testing.T) {
 		filepath.Join(repoRoot(t), "spinifex", "domains", "network"),
 		filepath.Join(repoRoot(t), "spinifex", "runtime", "daemon"),
 		filepath.Join(repoRoot(t), "spinifex", "domains", "ecs"),
+		filepath.Join(repoRoot(t), "spinifex", "domains", "iam"),
+		filepath.Join(repoRoot(t), "spinifex", "domains", "sts"),
+		filepath.Join(repoRoot(t), "spinifex", "domains", "rds", "instance"),
+		filepath.Join(repoRoot(t), "spinifex", "domains", "eks", "cluster"),
+		filepath.Join(repoRoot(t), "spinifex", "domains", "elbv2"),
 	}
 	type hit struct {
 		file string

spinifex/domains/network/invariants/names_test.go

@@ -250,6 +250,11 @@ func s4ScanRoots(t *testing.T) []string {
 		filepath.Join(root, "spinifex", "runtime", "roles", "vpcd"),
 		filepath.Join(root, "spinifex", "runtime", "daemon"),
 		filepath.Join(root, "spinifex", "domains", "ecs"),
+		filepath.Join(root, "spinifex", "domains", "iam"),
+		filepath.Join(root, "spinifex", "domains", "sts"),
+		filepath.Join(root, "spinifex", "domains", "rds", "instance"),
+		filepath.Join(root, "spinifex", "domains", "eks", "cluster"),
+		filepath.Join(root, "spinifex", "domains", "elbv2"),
 		filepath.Join(root, "spinifex", "runtime", "compute", "vm"),
 	}
 }

spinifex/domains/network/invariants/nats_subjects_test.go

@@ -36,6 +36,11 @@ func TestS7_NATSSubjectsCarryAZPrefix(t *testing.T) {
 		filepath.Join(repoRoot(t), "spinifex", "runtime", "roles", "vpcd"),
 		filepath.Join(repoRoot(t), "spinifex", "runtime", "daemon"),
 		filepath.Join(repoRoot(t), "spinifex", "domains", "ecs"),
+		filepath.Join(repoRoot(t), "spinifex", "domains", "iam"),
+		filepath.Join(repoRoot(t), "spinifex", "domains", "sts"),
+		filepath.Join(repoRoot(t), "spinifex", "domains", "rds", "instance"),
+		filepath.Join(repoRoot(t), "spinifex", "domains", "eks", "cluster"),
+		filepath.Join(repoRoot(t), "spinifex", "domains", "elbv2"),
 		filepath.Join(repoRoot(t), "internal", "testkit"),
 		filepath.Join(repoRoot(t), "contracts", "network"),
 	}