Initial scaffold

- Terraform module for groups, SAML/OAuth2/LDAP providers, applications, and LDAP outposts
- Data-driven YAML config with Terragrunt config loader
- Environment: identity.unkin.net with Consul backend
- Provider: goauthentik/authentik 2026.5.0
- Woodpecker CI pipelines (pre-commit, plan, apply)
- Makefile with Vault AppRole and K8s auth support

environments/identity.unkin.net/terragrunt.hcl

@@ -0,0 +1,24 @@
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+  expose = true
+}
+
+include "config" {
+  path   = "${get_repo_root()}/config/config.hcl"
+  expose = true
+}
+
+locals {
+  config = include.config.locals.config
+}
+
+terraform {
+  source = "../../modules/authentik"
+}
+
+inputs = {
+  groups           = local.config.groups
+  providers_saml   = local.config.providers_saml
+  providers_oauth2 = local.config.providers_oauth2
+  providers_ldap   = local.config.providers_ldap
+}