chore: clarify configuration guidance

[xnoto]

Summary

• remove redundant/stale HCL comments
• preserve Cloudflare zone-setting import ID guidance in AGENTS.md
• enable the Make IT Work ArgoCD MCP for tunnel and route diagnostics

Validation

• canonical tfroot pre-commit suite
• actionlint

No OpenTofu plan/apply was run locally.

[github-actions]

OpenTofu Plan

OpenTofu will perform the following actions:

  # cloudflare_zero_trust_organization.main will be updated in-place
  ~ resource "cloudflare_zero_trust_organization" "main" {
      + mfa_configuration_allowed   = (known after apply)
      + mfa_required_for_all_apps   = false
        name                        = "makeitworkcloud.cloudflareaccess.com"
      + ui_read_only_toggle_reason  = (known after apply)
        # (5 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.