fix(query): skip Fargate local volumes in EFS transit encryption check

[l46983284-cpu]

Closes #8031

Reason for Proposed Changes

• Query 4d46ff3b (EFS Volume With Disabled Transit Encryption) treats every plain volume block on aws_ecs_task_definition as a missing EFS transit encryption setting.
• Fargate tasks use platform-managed local storage for plain volume blocks. Requiring efs_volume_configuration there is a false positive (reported for Fargate local volumes).

Proposed Changes

• Skip the “missing efs_volume_configuration” branch when requires_compatibilities includes FARGATE.
• Keep reporting DISABLED / missing transit_encryption whenever efs_volume_configuration is present, including Fargate + EFS.
• Add negative fixtures for Fargate local volumes and a positive fixture for Fargate + EFS with transit encryption disabled.

How tested

• Static review of query.rego guard placement and fixture set.
• Host lacks full KICS/OPA suite; fixtures follow the existing query test layout.

I submit this contribution under the Apache-2.0 license.