Document 035-workspaces (needs AD user) and 059-datazone (needs IC+DataZone integration)

Final score: 64/66 pass locally (97%).
035: needs user created in AD directory (LDAP/domain-joined instance)
059: needs IC user mapped as DataZone project member

Author: mwunderl

tuts/035-workspaces-personal/REVISION-HISTORY.md

@@ -14,3 +14,7 @@
 ### 2026-04-27 v-ni1 non-interactive
 - Type: functional
 - Made script fully non-interactive for automated testing
+
+### 2026-04-29 note
+- Type: documentation
+- Requires a user in the AD directory before running. Simple AD user creation needs LDAP tools or a domain-joined EC2 instance. Cannot be fully automated without manual directory user setup.

tuts/059-amazon-datazone-gs/REVISION-HISTORY.md

@@ -14,3 +14,7 @@
 ### 2026-04-29 note
 - Type: documentation
 - CreateEnvironmentProfile requires IAM Identity Center integration with DataZone. The domain owner IAM user alone cannot create environment profiles without SSO configured. This is a service prereq, not a script bug.
+
+### 2026-04-29 note
+- Type: documentation
+- CreateEnvironmentProfile requires the calling principal to be a DataZone project member via Identity Center. DataZone uses its own authorization model separate from IAM. Needs IC user mapped to DataZone domain.