ae679ab587
Keep local/default terragrunt runs pointed at the real public URL; set the goauthentik#954 ClusterIP workaround via TF_VAR_authentik_url in the CI environment blocks instead of as a terragrunt input.