Run plan without acquiring the Consul state lock

PR plan pipelines were failing with "Error acquiring the state lock"
when they collided with a concurrent apply (or another plan) holding
the lock on the same Consul-backed state.

- plan: pass -lock=false to terragrunt plan; apply keeps locking

.gitea/workflows/build.yaml

@@ -28,7 +28,6 @@ jobs:
       - name: Run Terraform Plan
         env:
           VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
-          TERRAFORM_VERSION: "1.15.0"
         run: |
-          curl -fsSL -o /tmp/terraform.zip "https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/hashicorp-releases/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip" && python3 -m zipfile -e /tmp/terraform.zip /tmp/ && install -m0755 /tmp/terraform /usr/local/bin/terraform && rm -f /tmp/terraform.zip /tmp/terraform /tmp/LICENSE.txt
+          dnf install terraform -y
           make plan

.gitea/workflows/deploy.yaml

@@ -22,7 +22,6 @@ jobs:
       - name: Run Terraform Apply
         env:
           VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
-          TERRAFORM_VERSION: "1.15.0"
         run: |
-          curl -fsSL -o /tmp/terraform.zip "https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/hashicorp-releases/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip" && python3 -m zipfile -e /tmp/terraform.zip /tmp/ && install -m0755 /tmp/terraform /usr/local/bin/terraform && rm -f /tmp/terraform.zip /tmp/terraform /tmp/LICENSE.txt
+          dnf install terraform -y
           make apply

Makefile

@@ -46,7 +46,7 @@ init:
 
 plan: init
 	@$(call vault_env) && \
-	terragrunt run --all --parallelism 4 --non-interactive plan
+	terragrunt run --all --parallelism 4 --non-interactive plan -- -lock=false
 
 apply: init
 	@$(call vault_env) && \