feat: major restructuring in migration to terragrunt

- migrate from individual terraform files to config-driven terragrunt module structure
- add vault_cluster module with config discovery system
- replace individual .tf files with centralized config.hcl
- restructure auth and secret backends as configurable modules
- move auth roles and secret backends to yaml-based configuration
- convert policies from .hcl to .yaml format, add rules/auth definition
- add pre-commit hooks for yaml formatting and file cleanup
- add terragrunt cache to gitignore
- update makefile with terragrunt commands and format target

config/auth_approle_role/approle/tf_vault.yaml

@@ -0,0 +1,30 @@
+token_policies:
+  - "default_access"
+  - "approle_token_create"
+  - "auth/approle/approle_role_admin"
+  - "auth/approle/approle_role_login"
+  - "auth/kubernetes/k8s_auth_admin"
+  - "auth/ldap/ldap_admin"
+  - "auth/token/auth_token_create"
+  - "auth/token/auth_token_self"
+  - "auth/token/auth_token_roles_admin"
+  - "kubernetes/au/config_admin"
+  - "kubernetes/au/roles_admin"
+  - "kv/service/glauth/services/svc_vault_read"
+  - "kv/service/kubernetes/au/syd1/token_reviewer_jwt/read"
+  - "kv/service/kubernetes/au/syd1/service_account_jwt/read"
+  - "kv/service/vault/auth_backends_read"
+  - "pki_int/pki_int_roles_admin"
+  - "pki_root/pki_root_roles_admin"
+  - "ssh-host-signer/ssh-host-signer_roles_admin"
+  - "sshca/sshca_roles_admin"
+  - "sys/sys_auth_admin"
+  - "sys/sys_mounts_admin"
+  - "sys/sys_policy_admin"
+  - "transit/keys/admin"
+token_ttl: 60
+token_max_ttl: 120
+bind_secret_id: false
+token_bound_cidrs:
+  - "10.10.12.200/32"
+use_deterministic_role_id: false