aws-ssm-param-drift — diff a YAML baseline against live SSM Parameter Store

Parameter Store is where configuration goes to rot: somebody fixes an incident at 02:00 by editing a parameter in the console and nothing records that the running config no longer matches the repo. Declare what a service expects in YAML, then diff it against the live account.