Terraform repeatedly wants to recreate AWS security groups due to non-deterministic 'tags' ordering in provider responses
## Environment Terraform 1.2.9 with hashicorp/aws provider 3.63.0 managed via CI (GitHub Actions). Resources include aws_security_group and aws_instance with 'tags' block. Team runs 'terraform apply' in CI after every merge; PRs show terraform plan ...