feat: add build job

- add build job that runs `make plan`
- add deploy job that runs `make apply`
- ensure make-plan also runs init target
- enable provider caching
- enable creating client.crt/client.key
- trap EXIT to cleanup temp directory

config/instances/ausyd1nxvm2097/terragrunt.hcl

@@ -27,17 +27,15 @@ dependencies {
   paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }
 
-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}
 
 generate "incus" {
   path      = "incus.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"
 
       remote {
         name    = "${basename(get_terragrunt_dir())}"
@@ -50,3 +48,7 @@ generate "incus" {
     }
   EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+