What type of PR is this? (check all applicable)

• New Path
• Add / Update / Fix info within an existing path
• New Feature / Major Change / Refactor / Optimization
• Non path based documentation Update (Readme, etc)

Description

• Adds 5 privilege escalation paths for Amazon Bedrock AgentCore: Runtime, Harness and Custom Browser (existing and create variants). Code Interpreter is already covered by
  bedrock-001/bedrock-002.
• Based on Phantom Labs research: Mapping Every Privilege Escalation Path in AWS AgentCore (BeyondTrust).
• Each resource serves its execution role credentials from MMDS (169.254.169.254) inside a Firecracker microVM; the attacker reaches it via an existing resource (fewer permissions) or a new one
  (iam:PassRole + a Create* chain).

• Runtime-existing and Harness-existing share InvokeAgentRuntimeCommand, so they are one path (bedrock-004); its additional perms (ListAgentRuntimes, ListHarnesses) cover both.

How to reproduce and testing

See the Adding a New Privilege Escalation Path section of our Contributing Guide to see how to test your changes locally.