Implement CloudResource base class and provider-specific subclasses:
- AWSResource (S3 buckets & EC2 instances)
- GCPResource (GCS buckets & Compute Engine instances)
- AzureResource (Blob Storage containers & Virtual Machines)

Comprehensive BDD/Behave test coverage for all implementations through
cloud_resource_models.feature. Also adds create_cloud_resource factory
helper and CLOUD_RESOURCE_REGISTRY type map.

Updates:
- CHANGELOG.md with entry under [Unreleased] section
- CONTRIBUTORS.md with contribution entry for HAL 9000
- handlers/__init__.py to export new model classes

Part of Epic #8568 (Resource Types & Container Tool Execution).

ISSUES CLOSED: #8607

@@ -0,0 +5,4 @@
+import re
+from typing import Any
+
+from behave import given, then, when  # type: ignore[attr-defined]

@@ -0,0 +217,4 @@
+    except (ValueError, KeyError, TypeError) as exc:
+        context.cr_error = exc  # type: ignore[attr-defined]
+
+

@@ -0,0 +310,4 @@
+    assert res.project_id == expected, f"Expected '{expected}', got '{res.project_id}'"
+
+
+@then("bucket_name should be 'my-gcs-bucket'")

@@ -0,0 +361,4 @@
+    assert isinstance(res, AzureResource), f"Expected AzureResource, got {type(res)}"
+
+
+@then("the cloud resource registry is queried")

@@ -0,0 +97,4 @@
+        'base'
+    """
+
+    __slots__ = (

@@ -0,0 +104,4 @@
+        "properties",
+    )
+
+    __class__: ClassVar[str] = "base"  #: Override in subclasses.

@@ -0,0 +121,4 @@
+                "Cloud resource 'resource_id' must be a non-empty string."
+            )
+        if resource_type and provider != "base":
+            _valid = getattr(type(self), "_VALID_RESOURCE_TYPES", None)

@@ -0,0 +206,4 @@
+        ...     resource_type="ec2-instance")
+    """
+
+    __class__ = "aws"  # Override provider marker.

@@ -0,0 +288,4 @@
+        ...     project_id="acme-project", resource_type="compute-instance")
+    """
+
+    __class__ = "gcp"

@@ -0,0 +356,4 @@
+        ...     subscription_id="sub-12345", resource_type="virtual-machine")
+    """
+
+    __class__ = "azure"

@@ -0,0 +5,4 @@
+import re
+from typing import Any
+
+from behave import given, then, when  # type: ignore[attr-defined]

@@ -0,0 +92,4 @@
+
+# ── When steps ───────────────────────────────────────────────
+
+@when("the resource has been created")

@@ -0,0 +223,4 @@
+    assert "gcp" in getattr(ctx, "_registry", {})
+
+
+@then("it should contain 'azure' provider")

@@ -0,0 +55,4 @@
+    resource_id, provider, region, and resource_type with validation.
+    """
+
+    __class__: ClassVar[str] = "base"  # Provider marker, overridden in subclasses.

@@ -0,0 +155,4 @@
+        if (self.resource_type == "s3-bucket"
+                and self.resource_id.startswith("arn:aws:s3:::")):
+            # "arn:aws:s3:::" is 13 characters
+            object.__setattr__(self, "_bucket_name", self.resource_id[13:])

@@ -0,0 +198,4 @@
+            resource_type=resource_type, properties=properties or {},
+            **extra,
+        )
+        object.__setattr__(self, "project_id", project_id)

@@ -0,0 +236,4 @@
+            resource_type=resource_type, properties=properties or {},
+            **extra,
+        )
+        object.__setattr__(self, "subscription_id", subscription_id)

@@ -0,0 +18,4 @@
+
+  Scenario: AWSResource for S3 bucket extracts correct bucket name
+    Given an AWSResource is created with ARN "arn:aws:s3:::my-bucket" in region "us-east-1"
+    WHEN the resource has been created

@@ -0,0 +19,4 @@
+  Scenario: AWSResource for S3 bucket extracts correct bucket name
+    Given an AWSResource is created with ARN "arn:aws:s3:::my-bucket" in region "us-east-1"
+    WHEN the resource has been created
+    THEN it should have resource_type "s3-bucket"

@@ -0,0 +5,4 @@
+import re
+from typing import Any
+
+from behave import given, then, when  # type: ignore[attr-defined]

@@ -0,0 +92,4 @@
+
+# ── When steps ───────────────────────────────────────────────
+
+@when("the resource has been created")

@@ -0,0 +219,4 @@
+
+
+@then('it should contain "gcp" provider')
+def step_reg_gcp(ctx: Context) -> None:  # type: ignore[name-induced]

@@ -0,0 +223,4 @@
+    assert "gcp" in getattr(ctx, "_registry", {})
+
+
+@then("it should contain 'azure' provider")

@@ -65,4 +76,4 @@
     "ResourceHandler",
     "RollbackResult",
     "SandboxResult",
     "WriteResult",

@@ -0,0 +55,4 @@
+    resource_id, provider, region, and resource_type with validation.
+    """
+
+    __class__: ClassVar[str] = "base"  # Provider marker, overridden in subclasses.

@@ -0,0 +155,4 @@
+        if (self.resource_type == "s3-bucket"
+                and self.resource_id.startswith("arn:aws:s3:::")):
+            # "arn:aws:s3:::" is 13 characters
+            object.__setattr__(self, "_bucket_name", self.resource_id[13:])

@@ -0,0 +267,4 @@
+    Args:
+        name: Provider key -- ``"aws"``, ``"gcp"``, or ``"azure"``.
+        resource_id: Unique resource identifier. region: Cloud region code.
+        properties: Optional config metadata passed tosubclass.

@@ -0,0 +5,4 @@
+import re
+from typing import Any
+
+from behave import given, then, when  # type: ignore[attr-defined]

@@ -0,0 +93,4 @@
+# ── When steps ───────────────────────────────────────────────
+
+@when("the resource has been created")
+def step_create(ctx: Context) -> None:  # type: ignore[name-defined]

@@ -0,0 +131,4 @@
+
+# ── Then steps ───────────────────────────────────────────────
+
+@then('it should have provider "{expected}"')

@@ -0,0 +55,4 @@
+    resource_id, provider, region, and resource_type with validation.
+    """
+
+    __class__: ClassVar[str] = "base"  # Provider marker, overridden in subclasses.

@@ -0,0 +155,4 @@
+        if (self.resource_type == "s3-bucket"
+                and self.resource_id.startswith("arn:aws:s3:::")):
+            # "arn:aws:s3:::" is 13 characters
+            object.__setattr__(self, "_bucket_name", self.resource_id[13:])

@@ -0,0 +13,4 @@
+
+
+@given("the cloud resource stub module is available")
+def step_module_available(context):

@@ -0,0 +138,4 @@
+
+
+@when('provider is auto-set with project_id "my-project"')
+def step_gcp_auto_provider(context):

@@ -0,0 +183,4 @@
+
+
+@when('provider is auto-set with subscription_id "sub-123"')
+def step_azure_auto_provider(context):

@@ -0,0 +87,4 @@
+            ValueError: If the provider is not recognised.
+        """
+        v_lower = v.lower().strip()
+        if v_lower not in CLOUD_PROVIDERS:

@@ -0,0 +13,4 @@
+
+
+@given("the cloud resource stub module is available")
+def step_module_available(context):

@@ -0,0 +57,4 @@
+        context.exc = exc
+
+
+@then('the resource should have provider "aws"')

@@ -0,0 +402,4 @@
+# are resolved with the correct module globals before any instantiation runs.
+# ---------------------------------------------------------------------------
+
+CloudResource.model_rebuild(_types_namespace={"Any": Any})  # noqa: PLW0603

@@ -0,0 +57,4 @@
+        context.exc = exc
+
+
+@then('the resource should have provider "aws"')

@@ -0,0 +402,4 @@
+# are resolved with the correct module globals before any instantiation runs.
+# ---------------------------------------------------------------------------
+
+CloudResource.model_rebuild(_types_namespace={"Any": Any})  # noqa: PLW0603

@@ -0,0 +63,4 @@
+    assert context.exc is None
+    assert context.result.provider == "aws"
+
+

@@ -0,0 +62,4 @@
+    """Assert the constructed resource has provider 'aws'."""
+    assert context.exc is None
+    assert context.result.provider == "aws"
+

@@ -0,0 +41,4 @@
+    try:
+        context.exc = None
+        context.result = CloudResource(**data)
+    except ValueError as exc:

@@ -0,0 +54,4 @@
+
+    model_config = ConfigDict(frozen=True, str_strip_whitespace=True)
+
+    resource_id: str | None = Field(

@@ -0,0 +92,4 @@
+        v_lower = v.lower().strip()
+        if v_lower not in CLOUD_PROVIDERS:
+            raise ValueError(
+                f"Unknown cloud provider '{v}'. "

@@ -0,0 +47,4 @@
+
+@when('an invalid provider "oracle" is set')
+def step_set_invalid_provider(context):
+    """Set invalid provider and expect ValueError."""

@@ -0,0 +105,4 @@
+        Args:
+            v: Resource state to validate.
+
+        Returns:

@@ -0,0 +165,4 @@
+        description="AWS ARN (Amazon Resource Name) for the resource.",
+    )
+    tags: dict[str, str] = Field(
+        default_factory=dict,

@@ -0,0 +375,4 @@
+        Args:
+            v: Region string.
+
+        Returns: