feat: initial terraform-git project

Manage Gitea resources via Terraform/Terragrunt with YAML-driven config.

Resources managed:
- Organisation (unkin)
- 28 repositories with settings
- 6 teams with members
- 13 branch protection rules
- 9 Woodpecker CI repo activations
- Deploy key module (ready, no keys yet)

Config structure: config/<service>/<org>/<type>/<object>.yaml
Consul backend for state, Vault for auth tokens.

config/git.unkin.net/unkin/repository/node-lookup.yaml

@@ -0,0 +1,15 @@
+description: "A CLI tool written in Go that queries the PuppetDB API to look up and filter node facts."
+private: false
+default_branch: "master"
+default_delete_branch_after_merge: true
+default_merge_style: "squash"
+branch_protection:
+  - rule_name: "master"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/lint"
+      - "ci/woodpecker/pr/pre-commit"
+      - "ci/woodpecker/pr/unit-tests"
+    approval_whitelist_users:
+      - "unkinben"
+woodpecker: true