ECR image - protect specific version/tag from deletion

As a user of AWS container services, I would like to be able to "lock" a particular image version/tag and prevent it from being deleted either manually or via lifecycle policies.

**Tell us about your request**
Add deletion protection to ECR repository images to prevent accidental deletion of important image versions when using automation, CLI or via lifecycle rules.

**Which service(s) is this request for?**
ECR

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
We push images to all environments regularly and tag as "latest" the image version we need to that environment when needed. Currently, lifecycle rules are set to keep 10 image versions, however, images are pushed several times per day. Sometimes, the "latest" tag image is being removed by the lifecycle policy. Both "image count" and "time since image pushed" policies can remove image versions that are important to the current environment.

**Are you currently working around this issue?**
We will increase the number of images to 100 as a temporary solution and consider stop pushing images to all environments all the time and instead push only during CD, which will prolong the deployment time.

The issue names AWS ECR image tags and lifecycle policies but no repository files, tests, or implementation entry point. Start by researching ECR deletion behavior for manual, CLI, and lifecycle-policy deletions. Done would require a defined way to lock a specific image version or tag and verify that each deletion path respects the protection.

Written by the indexing model from the issue text.