Terraform drift fix replaces a subnet that still holds the canary target group route

The plan appears corrective, but applying it would cut live traffic because one supposedly stale subnet still anchors an active canary path.