This Terraform project owns the public delegation and T3 Code CNAME declared
in ../dnsconfig.json. It uses the pinned Cloudflare provider, the component
AppRole and DNS credentials, and its own Vault HTTP state backend at
alwaldend.com/vault1/approles/src_infra_local_inference/tf_backend/dns.
It has no dependency on GPU provisioning inputs, Yandex login, or VM state.
Use //infra/local_inference/dns:tf.plan to save a private plan, inspect it
with :tf.show, and apply the reviewed file with :tf.apply. Source checks
use :tf_tests.fmt_test and affected Bazel lint/tests. Live operations require
explicit authorization.