tofu(proxmox): API-only native cloud-init; move node baseline to Ansible node_baseline role

Co-Authored-By: Claude Opus 4.8 <[email protected]>

.gitignore

@@ -20,6 +20,9 @@ kubeconfig
 .terraform.lock.hcl
 *.tfvars
 !*.example.tfvars
+# tofu apply/plan run logs (tee'd locally; never commit)
+apply.log
+plan.log
 
 # Test / build artifacts
 /results/