A cloud engineer manages production infrastructure using a declarative infrastructure-as-code template stored in a version control repository. Over several weeks, an on-call engineer made manual changes directly in the cloud console to resolve incidents, and now the running environment no longer matches the template. Before applying the next planned template update, which action should the engineer take FIRST to safely restore consistency?