Lock Down Values in Pulumi ESC with fn::final

Pulumi ESC introduces fn::final, a built-in function that lets you mark configuration values as immutable in parent environments. When a child environment attempts to override a value marked with fn::final, ESC raises a warning and preserves the original value, preventing accidental or unauthorized changes to security policies and compliance settings.