Preventing IAM Template Injection in EKS Authentication Pipelines