feat: add build job

- add build job that runs `make plan`
- add deploy job that runs `make apply`
- ensure make-plan also runs init target
- enable provider caching
- enable creating client.crt/client.key
- trap EXIT to cleanup temp directory

config/nodes/ausyd1nxvm2062_images/terragrunt.hcl

@@ -34,7 +34,7 @@ generate "provider" {
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
 
       remote {

config/nodes/prodnxsr0009/terragrunt.hcl

@@ -26,7 +26,7 @@ generate "provider" {
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
 
       remote {

config/nodes/prodnxsr0010/terragrunt.hcl

@@ -26,7 +26,7 @@ generate "provider" {
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
 
       remote {

config/nodes/prodnxsr0011/terragrunt.hcl

@@ -26,7 +26,7 @@ generate "provider" {
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
 
       remote {

config/nodes/prodnxsr0012/terragrunt.hcl

@@ -26,7 +26,7 @@ generate "provider" {
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
 
       remote {

config/nodes/prodnxsr0013/terragrunt.hcl

@@ -26,7 +26,7 @@ generate "provider" {
   if_exists = "overwrite_terragrunt"
   contents  = <<-EOF
     provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
       accept_remote_certificate    = true
 
       remote {