[justgithubaccount]

Summary

• use the official Timeweb provider and the provisioning module at an exact commit
• dynamically select current Kubernetes presets instead of stale account-specific IDs
• enforce a pre-apply 80 RUB estimate ceiling with one worker
• add a same-job plan -> apply -> Helm deploy -> health -> destroy workflow
• always attempt destroy after init and verify empty Terraform state
• remove credential-like S3 values from .env.example; rotate them if they were real
• make remote S3 state opt-in for persistent environments

Dependencies

• provisioning module: fix: modernize Timeweb provisioning module infra-cluster#2
• Helm chart: fix: align Helm chart with current FastAPI release app-poly-gitops-helm#2

Verification

• bash tests/test_ephemeral_smoke.sh
• actionlint
• terraform fmt -check -recursive
• terraform init -backend=false && terraform validate
• exact-head live run: https://github.com/justgithubaccount/app-poly-gitops-infra/actions/runs/40665456997
  • head 24796db29002a6741e0a6c6b8f66d5803be5a3c4
  • Timeweb Kubernetes node reached Ready
  • Helm install succeeded
  • in-cluster /health returned {"status":"ok"}
  • Destroy complete! Resources: 3 destroyed
  • empty Terraform state verified
  • estimated two-hour ceiling: 13.78 RUB

Self-check only; no independent approval is implied.