Mark G22c, G10-3b and C2PA complete; lock the AWS-native sub-order

Mark G22c, G10-3b and C2PA complete; lock the AWS-native sub-order The detailed task entries were already [x]; only the summary lines were stale. G22c (public URL space) and G10-3b (per-tenant keys) are done, and C2PA (1.9 plus the per-tenant signing identities wired into the worker) is complete bar a management API for signing_identities. Records the locked AWS-native order: S3 Inventory -> S3 Batch bulk restore -> Intelligent-Tiering.