Find and take over dangling S3 references

Deleted buckets still referenced by a CNAME or app config can be re-created by anyone, yielding content control.