feat: implement consul ACL management with provider aliases

This commit message captures the major architectural change of implementing Consul ACL management
with proper provider aliasing, along with the supporting configuration files and policy definitions
for various terraform services.

- add consul_acl_management module to manage consul acl policies and roles
- add consul backend roles and policies for terraform services (incus, k8s, nomad, repoflow, vault)
- add consul provider configuration to root.hcl
- add policies to generate credentials for each role
- simplify consul_secret_backend_role module to reference acl-managed roles
- switch to opentofu for provider foreach support
- update terragrunt configuration to support consul backend aliases
- update pre-commit hooks to use opentofu instead of terraform
- configure tflint exceptions for consul acl management module

policies/consul_root/au/syd1/creds/terraform-incus.yaml

@@ -0,0 +1,10 @@
+# generate credentials for the terraform-incus role in consul
+---
+rules:
+  - path: "consul_root/au/syd1/creds/terraform-incus"
+    capabilities:
+      - read
+
+auth:
+  approle:
+    - terraform_incus

policies/consul_root/au/syd1/creds/terraform-k8s.yaml

@@ -0,0 +1,10 @@
+# generate credentials for the terraform-k8s role in consul
+---
+rules:
+  - path: "consul_root/au/syd1/creds/terraform-k8s"
+    capabilities:
+      - read
+
+auth:
+  approle:
+    - terraform_k8s

policies/consul_root/au/syd1/creds/terraform-nomad.yaml

@@ -0,0 +1,10 @@
+# generate credentials for the terraform-nomad role in consul
+---
+rules:
+  - path: "consul_root/au/syd1/creds/terraform-nomad"
+    capabilities:
+      - read
+
+auth:
+  approle:
+    - terraform_nomad

policies/consul_root/au/syd1/creds/terraform-repoflow.yaml

@@ -0,0 +1,10 @@
+# generate credentials for the terraform-repoflow role in consul
+---
+rules:
+  - path: "consul_root/au/syd1/creds/terraform-repoflow"
+    capabilities:
+      - read
+
+auth:
+  approle:
+    - terraform_repoflow

policies/consul_root/au/syd1/creds/terraform-vault.yaml

@@ -0,0 +1,10 @@
+# generate credentials for the terraform-vault role in consul
+---
+rules:
+  - path: "consul_root/au/syd1/creds/terraform-vault"
+    capabilities:
+      - read
+
+auth:
+  approle:
+    - tf_vault