Critique infrastructure-as-code (Terraform, Pulumi, Kubernetes, Docker) for security, correctness, and operational safety