Make integration tests stricter

[t0yv0]

Prior to this change, all example-based acceptance tests inherited a relaxed configuration.

	return integration.ProgramTestOptions{
		ExpectRefreshChanges: true,
		SkipRefresh:          true,
		Quick:                true,
	}

This was masking issues with unexpected diffs during refresh and any possible regressions as there provider evolves. After the change, only the test that need it are configured with these relaxed options and the code is cross-correlated to root cause issues where appropriate.

[github-actions]

Does the PR have any schema changes?

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

Maintainer note: consult the runbook for dealing with any breaking changes.

[t0yv0]

Looks like a fair number of tests does not refresh cleanly due to #2246

[t0yv0]

Another big issue affecting refresh tests is #3548

[t0yv0]

#3190 was concealed by lax testing options.

[t0yv0]

https://github.com/pulumi/pulumi-aws/blob/master/examples/cloudwatchOidcManual/index.ts#L25 cycles with non-empty preview because the token changes between program invocations. Interesting question here on whether the token should persist into the statefile at all.

[iwahbe]

LGTM