feat(terraform): support object-store plan handoff (CTK-835)

[samuelho-dev]

Summary

• optionally transfer saved Terraform plans through an S3-compatible object store
• preserve GitHub Artifacts as the default for existing callers
• verify plan archives by SHA-256 and delete them after every apply attempt

Verification

• nix run nixpkgs#actionlint -- .github/workflows/terraform-plan.yml .github/workflows/terraform-apply.yml
• local archive/checksum/extraction smoke
• git diff --check

References CTK-835

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 053634b2-cc0a-41ab-bc96-f9e5f5331276

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}