feat: major restructuring in migration to terragrunt

- migrate from individual terraform files to config-driven terragrunt module structure
- add vault_cluster module with config discovery system
- replace individual .tf files with centralized config.hcl
- restructure auth and secret backends as configurable modules
- move auth roles and secret backends to yaml-based configuration
- convert policies from .hcl to .yaml format, add rules/auth definition
- add pre-commit hooks for yaml formatting and file cleanup
- add terragrunt cache to gitignore
- update makefile with terragrunt commands and format target

policies/kv/service/packer/builder/read.yaml

@@ -0,0 +1,13 @@
+# Allow Packer builder to read configuration
+---
+rules:
+  - path: "kv/data/service/packer/builder/env"
+    capabilities:
+      - read
+  - path: "kv/data/service/packer/builder/docker-incus-client"
+    capabilities:
+      - read
+
+auth:
+  approle:
+    - packer_builder

policies/kv/service/packer/packer_builder.hcl

@@ -1,6 +0,0 @@
-path "kv/data/service/packer/builder/env" {
-  capabilities = ["read"]
-}
-path "kv/data/service/packer/builder/docker-incus-client" {
-  capabilities = ["read"]
-}