refactor: reorganize GitOps control plane

iac/terraform/modules/vault-policy-set/main.tf

@@ -0,0 +1,11 @@
+resource "vault_policy" "this" {
+  for_each = var.policies
+
+  name   = each.key
+  policy = each.value
+}
+
+output "names" {
+  description = "Policy names keyed by their requested names."
+  value       = { for name, policy in vault_policy.this : name => policy.name }
+}

iac/terraform/modules/vault-policy-set/variables.tf

@@ -0,0 +1,4 @@
+variable "policies" {
+  description = "Map of Vault policy names to HCL policy documents."
+  type        = map(string)
+}

iac/terraform/modules/vault-policy-set/versions.tf

@@ -0,0 +1,10 @@
+terraform {
+  required_version = ">= 1.11.0"
+
+  required_providers {
+    vault = {
+      source  = "hashicorp/vault"
+      version = "~> 5.7.0"
+    }
+  }
+}