False positive for W1030 which validates that Ref values match what the consuming property expects

[kaizencc]

Example: https://github.com/aws/aws-cdk/blob/aa71ef5f1cc8308e5083b4a6acd72b694a67ceca/packages/aws-cdk-lib/aws-lambda/test/function-policy-statement-token-resolution.test.ts#L26-L35

bucketListParam.valueAsString produces a Ref to a String-typed parameter, and Fn::Split produces a list from it. The resulting list elements go into Resource in an IAM policy statement, which expects ARN strings. The engine can't verify at synth time that the split values will actually be valid ARNs — they're opaque tokens. So it shouldn't flag