chore(smoke-nuke): list all states; stale orphans live outside the filter set

Previous nuke listed 9 orphan all-demo-* stacks but missed
all-demo-PaperlessNgx-Q59CODQ417ER and all-demo-BopsPlanning-1KFCREGSEO53T.
The next PR 321 smoke retry then collided on every IAM role, ALB, ECS
cluster, S3 bucket those stacks still owned.

Stacks created mid-flight by the cancelled post-merge smoke (which kept
running server-side after the GH job was killed) probably entered
CREATE_IN_PROGRESS → UPDATE_COMPLETE_CLEANUP_IN_PROGRESS or similar
windows the older filter list missed.

Expand the filter to enumerate every state CFN reports — CREATE_*,
ROLLBACK_*, DELETE_*, UPDATE_*, UPDATE_ROLLBACK_*, REVIEW_*, IMPORT_*
including the *_CLEANUP_IN_PROGRESS suffix variants. Only DELETE_COMPLETE
is excluded (those are already gone). Any orphan in any non-deleted
state now reaches force_delete_stack.

Author: chrisns

scripts/smoke-nuke.sh

@@ -109,10 +109,22 @@ echo "PHASE 1: delete CFN stacks matching ${STACK}*"
 echo "============================================================"
 # Top-level stacks named STACK or STACK-*: delete each.
 # delete-stack on the umbrella cascades to nested children.
+# All non-DELETE_COMPLETE states. The earlier filter missed
+# UPDATE_ROLLBACK_COMPLETE_CLEANUP_IN_PROGRESS and the IMPORT_* family;
+# `Q59CODQ417ER` / `1KFCREGSEO53T` were ghosts the nuke kept skipping.
+# Listing every non-terminal-deleted state guarantees we see them.
 top_stacks=$(aws cloudformation list-stacks \
-  --stack-status-filter CREATE_COMPLETE UPDATE_COMPLETE UPDATE_ROLLBACK_COMPLETE \
-    DELETE_FAILED UPDATE_ROLLBACK_FAILED CREATE_FAILED UPDATE_FAILED \
-    ROLLBACK_COMPLETE ROLLBACK_FAILED \
+  --stack-status-filter \
+    CREATE_IN_PROGRESS CREATE_FAILED CREATE_COMPLETE \
+    ROLLBACK_IN_PROGRESS ROLLBACK_FAILED ROLLBACK_COMPLETE \
+    DELETE_IN_PROGRESS DELETE_FAILED \
+    UPDATE_IN_PROGRESS UPDATE_COMPLETE_CLEANUP_IN_PROGRESS UPDATE_COMPLETE \
+    UPDATE_FAILED \
+    UPDATE_ROLLBACK_IN_PROGRESS UPDATE_ROLLBACK_FAILED \
+    UPDATE_ROLLBACK_COMPLETE_CLEANUP_IN_PROGRESS UPDATE_ROLLBACK_COMPLETE \
+    REVIEW_IN_PROGRESS \
+    IMPORT_IN_PROGRESS IMPORT_COMPLETE \
+    IMPORT_ROLLBACK_IN_PROGRESS IMPORT_ROLLBACK_FAILED IMPORT_ROLLBACK_COMPLETE \
   --query "StackSummaries[?StackName=='${STACK}' || starts_with(StackName, '${STACK}-')].StackName" \
   --output text 2>/dev/null | tr '\t' '\n' | grep -v '^$' || true)
 if [ -z "$top_stacks" ]; then