Oracle 19c risk: ValidateCreateParams must allowlist (reject STIG-weakening overrides / attack-surface options)

[wz-gsa]

Part of #519.

Problem

Tenant-supplied create/update parameters could weaken the STIG-hardened Oracle baseline (e.g. disabling audit_trail, turning off sec_case_sensitive_logon) or enable attack-surface features (XDB HTTP listener, external procedures / extproc, Java VM) that the baseline intentionally omits.

Proposed

oracle19cBaseline.ValidateCreateParams/ValidateUpdateParams should enforce an allowlist, not a denylist: reject any tenant override of STIG-relevant hardened parameters, and refuse to enable options that expand attack surface unless explicitly justified. Fail closed with a clear message before the AWS call.

Acceptance criteria

• Allowlist of tenant-modifiable Oracle params/options defined + documented.
• Overrides of STIG-relevant params rejected with negative tests.
• Attack-surface options rejected/omitted by default.