Resource Tag Audit

Audit a resource inventory against a tagging contract. The finding that spans the inventory: two tag keys differing only in case, which cloud APIs treat as different keys so every grouping and cost report splits silently across them. Also reports a required tag absent, an empty value that satisfies a presence check and carries no information, a value with surrounding whitespace that groups separately, a value outside a permitted set, and a value a declared pattern does not accept.