feat: initial terraform-git project

Manage Gitea resources via Terraform/Terragrunt with YAML-driven config.

Resources managed:
- Organisation (unkin)
- 28 repositories with settings
- 6 teams with members
- 13 branch protection rules
- 9 Woodpecker CI repo activations
- Deploy key module (ready, no keys yet)

Config structure: config/<service>/<org>/<type>/<object>.yaml
Consul backend for state, Vault for auth tokens.

environments/au/syd1/terragrunt.hcl

@@ -0,0 +1,25 @@
+include "root" {
+  path   = find_in_parent_folders("root.hcl")
+  expose = true
+}
+
+include "config" {
+  path   = "${get_repo_root()}/config/config.hcl"
+  expose = true
+}
+
+locals {
+  config = include.config.locals.config
+}
+
+terraform {
+  source = "../../../modules/gitea_instance"
+}
+
+inputs = {
+  organisation      = local.config.organisation
+  repository        = local.config.repository
+  branch_protection = local.config.branch_protection
+  deploy_key        = local.config.deploy_key
+  team              = local.config.team
+}