test(golden): regenerate sentinel pins to match real BuildContext output

Five sentinel pins now reflect what real ``sam build`` and
``sam package`` write to disk:

- ``sam_resources/serverless_function_zip/expected.build.yaml`` now
  contains ``AWS::Serverless::Function`` (no SAM transform), with
  ``CodeUri: <<BUILT_ARTIFACT>>`` and a SAM-CLI-added
  ``Metadata.SamResourceId``. The pre-existing auto-generated
  ``HelloFunctionRole`` is gone (the SAM transform runs server-side
  at deploy time, not at build time).
- ``sam_resources/serverless_function_zip/expected.package.yaml``
  preserves the same shape, with ``CodeUri`` rewritten to
  ``s3://golden-bucket/<sha>``.
- ``packageable_resources/lambda_function_zip/expected.build.yaml``
  now carries ``Metadata.SamResourceId`` (added by SAM CLI's stack
  provider for raw CFN Lambdas, too).
- ``packageable_resources/lambda_function_zip/expected.package.yaml``
  carries the same metadata; ``Code`` becomes the
  ``{S3Bucket, S3Key}`` dict shape that real ``sam package`` emits.
- ``language_extensions/foreach_static_zip/expected.package.yaml``
  digest changes because the package URI is now content-addressed
  over the harness's sentinel placeholder file (whose content is the
  resource full path) rather than a synthesized hash. ``Fn::ForEach``
  preservation is unchanged.

Author: bnusunny

tests/golden/templates/language_extensions/foreach_static_zip/expected.package.yaml

@@ -6,7 +6,7 @@ Resources:
     - Beta
   - ${WorkerName}Function:
       Properties:
-        CodeUri: s3://golden-bucket/a199f4d73e5f32885341a8e279ab4d1ece42eebb187c5cde13ecbb95bcf49481
+        CodeUri: s3://golden-bucket/dd2bf2d87ad97f55f64a8691a0e0c55ec010e7791d6815e0c0f0037348b8d5db
         Handler: app.handler
         Runtime: python3.11
       Type: AWS::Serverless::Function

tests/golden/templates/packageable_resources/lambda_function_zip/expected.build.yaml

@@ -1,6 +1,8 @@
 AWSTemplateFormatVersion: '2010-09-09'
 Resources:
   HelloFunction:
+    Metadata:
+      SamResourceId: HelloFunction
     Properties:
       Code: <<BUILT_ARTIFACT>>
       FunctionName: hello

tests/golden/templates/packageable_resources/lambda_function_zip/expected.package.yaml

@@ -1,10 +1,12 @@
 AWSTemplateFormatVersion: '2010-09-09'
 Resources:
   HelloFunction:
+    Metadata:
+      SamResourceId: HelloFunction
     Properties:
       Code:
         S3Bucket: golden-bucket
-        S3Key: 17c3a49c87d6d228b7f4e7b016472d9da14ad548c986f67d3cc3c42365dabcf4
+        S3Key: 7187d20310f5514ad6d32ad02c3f6a8200a0b82949bcb4c63a751bc4ce730095
       FunctionName: hello
       Handler: app.handler
       MemorySize: 128

tests/golden/templates/sam_resources/serverless_function_zip/expected.build.yaml

@@ -1,33 +1,12 @@
 AWSTemplateFormatVersion: '2010-09-09'
 Resources:
   HelloFunction:
+    Metadata:
+      SamResourceId: HelloFunction
     Properties:
-      Code: <<BUILT_ARTIFACT>>
+      CodeUri: <<BUILT_ARTIFACT>>
       Handler: app.handler
       MemorySize: 128
-      Role:
-        Fn::GetAtt:
-        - HelloFunctionRole
-        - Arn
       Runtime: python3.11
-      Tags:
-      - Key: lambda:createdBy
-        Value: SAM
-    Type: AWS::Lambda::Function
-  HelloFunctionRole:
-    Properties:
-      AssumeRolePolicyDocument:
-        Statement:
-        - Action:
-          - sts:AssumeRole
-          Effect: Allow
-          Principal:
-            Service:
-            - lambda.amazonaws.com
-        Version: '2012-10-17'
-      ManagedPolicyArns:
-      - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
-      Tags:
-      - Key: lambda:createdBy
-        Value: SAM
-    Type: AWS::IAM::Role
+    Type: AWS::Serverless::Function
+Transform: AWS::Serverless-2016-10-31

tests/golden/templates/sam_resources/serverless_function_zip/expected.package.yaml

@@ -1,35 +1,12 @@
 AWSTemplateFormatVersion: '2010-09-09'
 Resources:
   HelloFunction:
+    Metadata:
+      SamResourceId: HelloFunction
     Properties:
-      Code:
-        S3Bucket: golden-bucket
-        S3Key: 17c3a49c87d6d228b7f4e7b016472d9da14ad548c986f67d3cc3c42365dabcf4
+      CodeUri: s3://golden-bucket/7187d20310f5514ad6d32ad02c3f6a8200a0b82949bcb4c63a751bc4ce730095
       Handler: app.handler
       MemorySize: 128
-      Role:
-        Fn::GetAtt:
-        - HelloFunctionRole
-        - Arn
       Runtime: python3.11
-      Tags:
-      - Key: lambda:createdBy
-        Value: SAM
-    Type: AWS::Lambda::Function
-  HelloFunctionRole:
-    Properties:
-      AssumeRolePolicyDocument:
-        Statement:
-        - Action:
-          - sts:AssumeRole
-          Effect: Allow
-          Principal:
-            Service:
-            - lambda.amazonaws.com
-        Version: '2012-10-17'
-      ManagedPolicyArns:
-      - arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole
-      Tags:
-      - Key: lambda:createdBy
-        Value: SAM
-    Type: AWS::IAM::Role
+    Type: AWS::Serverless::Function
+Transform: AWS::Serverless-2016-10-31