Efficient AWS Alarm Email Monitoring for CI/CD Workflows

CloudWatch alarms are easy to mark as "done" long before the notification path is actually safe. The metric flips, the alarm state changes, and the Terraform plan applied cleanly. Then the first real incident lands in an old team alias, or it arrives with the wrong enviroment name in the subject, an