A team consumes a registry module and wants controlled upgrades. What should it configure?

1. A renamed .terraform.lock.hcl file
2. A provider alias matching the module release
3. A module version constraint
4. A resource comment containing the release number