dnf install reads metadata for every enabled repo and downloads the
vendored terraform RPM on every pipeline run. Fetch the pinned upstream
zip from the artifactapi hashicorp-releases remote instead, matching the
vault pattern in terraform-vault and terraform-artifactapi.
- Replace dnf install terraform with a pinned curl of the terraform
1.15.0 zip (same version as the vendored RPM) from the artifactapi
hashicorp-releases remote, extracted to /usr/local/bin.