Write Terraform policies in natural language instead of Rego / OPA

Compliance and security rules are the very last place you would want to trust an LLM to produce correct output. It's worse than not having security at all, as it can trick users into believing there are safeguards when they don't exist.