[CHAIN] feat(ui): add attack paths node visual mapper

[Alan-TheGentleman]

🔗 Part of Chained PRs

Field	Value
Feature Branch	PROWLER-1273/react-flow-migration
Main PR	#10686
Chain Position	6 of 11
Depends on	#11010 (auto-fit + minimap polish)

Chain Overview

#10701 → #10705 → #10756 → #10800 → #10970 → #11010 → 📍 #11013 → #11014 → #11015 → #11016 → #11017 → #11020 → #10686

---

Context

This continues the Attack Paths React Flow chain by introducing a single semantic resolver for graph node visuals. The goal is to stop scattering label/icon/category decisions across components before rendering richer node icons.

---

Description

Changes:

• Add resolveNodeVisual() to centralize node category, display name, description, and icon resolution.
• Map provider roots, common AWS resources, identity/policy nodes, findings, internet, secrets, and fallback nodes.
• Add focused unit coverage for provider badges, AWS resources, finding severity icons, identity/policy mappings, and fallback behavior.

---

Steps to review

1. Review _lib/node-visuals.ts as the visual contract for graph nodes.
2. Check that unknown node labels still fall back safely.
3. Run pnpm exec vitest run --project unit "app/(prowler)/attack-paths/(workflow)/query-builder/_lib/node-visuals.test.ts" from ui/.

---

Checklist

Community Checklist

• This feature/issue is listed in here or roadmap.prowler.com
• Is it assigned to me, if not, request it via the issue/feature in here or Prowler Community Slack

• Review if the code is being covered by tests.
• Review if code is being documented following this specification https://github.com/google/styleguide/blob/gh-pages/pyguide.md#38-comments-and-docstrings
• Review if backport is needed.
• Review if is needed to change the Readme.md
• Ensure new entries are added to CHANGELOG.md, if applicable.

UI

• All issue/task requirements work as expected on the UI
• Screenshots/Video of the functionality flow (if applicable) - Mobile (X < 640px)
• Screenshots/Video of the functionality flow (if applicable) - Table (640px > X < 1024px)
• Screenshots/Video of the functionality flow (if applicable) - Desktop (X > 1024px)
• Ensure new entries are added to CHANGELOG.md, if applicable.

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[pfe-nazaries]

I would add a test like this to cover all icons

 describe("known node mappings", () => {
    it.each([
      ["AWSAccount",     NODE_CATEGORY.ACCOUNT,  "AWS Account",      AWSAccountIcon],
      ["S3Bucket",       NODE_CATEGORY.STORAGE,  "S3 Bucket",        AmazonS3Icon],
      ["S3",             NODE_CATEGORY.STORAGE,  "S3",               AmazonS3Icon],
      ["VPC",            NODE_CATEGORY.NETWORK,  "VPC",              AmazonVPCIcon],
      ["Subnet",         NODE_CATEGORY.NETWORK,  "Subnet",           Network],
      ["SecurityGroup",  NODE_CATEGORY.NETWORK,  "Security Group",   Network],
      ["InternetGateway",NODE_CATEGORY.NETWORK,  "Internet Gateway", Globe2],
      ["DefaultGateway", NODE_CATEGORY.NETWORK,  "Default Gateway",  Globe2],
      ["EC2Instance",    NODE_CATEGORY.COMPUTE,  "EC2 Instance",     AmazonEC2Icon],
      ["VirtualMachine", NODE_CATEGORY.COMPUTE,  "Virtual Machine",  AmazonEC2Icon],
      ["Compute",        NODE_CATEGORY.COMPUTE,  "Compute",          Server],
      ["NIC",            NODE_CATEGORY.COMPUTE,  "NIC",              Server],
      ["IAMUser",        NODE_CATEGORY.IDENTITY, "IAM User",         AWSIAMIcon],
      ["IAMRole",        NODE_CATEGORY.IDENTITY, "IAM Role",         AWSIAMIcon],
      ["ServiceAccount", NODE_CATEGORY.IDENTITY, "Service Account",  UserRound],
      ["AccessKey",      NODE_CATEGORY.SECRET,   "Access Key",       KeyRound],
      ["Secret",         NODE_CATEGORY.SECRET,   "Secret",           KeyRound],
    ] as const)("maps %s to %s with %s", (label, category, description, Icon) => {
      const visual = resolveNodeVisual(buildNode([label]));
      expect(visual).toMatchObject({ category, description, fallbackUsed: false });
      expect(visual.Icon).toBe(Icon);
    });
  });
`

[Alan-TheGentleman]

Added in 6c023affa and propagated through the chained branches up to #11020. I adapted the expected icons to the mappings that exist in each chain slice so the test matches the actual implementation at that point in the stack.