chore: clarify runner maintenance guidance

[xnoto]

Summary

• remove redundant cloud-init and HCL narration while retaining maintenance policy rationale
• enable the Make IT Work ArgoCD MCP for k3s/bootstrap diagnostics

Validation

• canonical tfroot pre-commit suite
• actionlint

No OpenTofu plan/apply was run locally.

[github-actions]

OpenTofu Plan

OpenTofu will perform the following actions:

  # module.k3s.libvirt_cloudinit_disk.commoninit will be created
  + resource "libvirt_cloudinit_disk" "commoninit" {
      + id             = (known after apply)
      + meta_data      = <<-EOT
            instance-id: k3s
            local-hostname: k3s
        EOT
      + name           = "k3s_commoninit"
      + network_config = <<-EOT
            version: 2
            ethernets:
              enp1s0:
                dhcp4: true
              enp2s0:
                dhcp4: false
                addresses:
                  - 192.168.102.2/24
        EOT
      + path           = (known after apply)
      + size           = (known after apply)
      + user_data      = (sensitive value)
    }

  # module.k3s.libvirt_volume.cloudinit will be replaced due to changes in replace_triggered_by
-/+ resource "libvirt_volume" "cloudinit" {
      ~ allocation = 53248 -> (known after apply)
      ~ capacity   = 51200 -> (known after apply)
      ~ create     = {
          ~ content = {
              ~ url = "/tmp/terraform-provider-libvirt-cloudinit/cloudinit-1acdadafe2fe685e.iso" -> (known after apply)
            }
        }
      ~ id         = "/mnt/nvme/cluster/k3s_cloudinit.iso" -> (known after apply)
      ~ key        = "/mnt/nvme/cluster/k3s_cloudinit.iso" -> (known after apply)
        name       = "k3s_cloudinit.iso"
      ~ path       = "/mnt/nvme/cluster/k3s_cloudinit.iso" -> (known after apply)
      ~ physical   = 51200 -> (known after apply)
        # (1 unchanged attribute hidden)
    }

  # module.k3s.terraform_data.cloudinit_content will be updated in-place
  ~ resource "terraform_data" "cloudinit_content" {
        id     = "5b88fd98-5e5c-89c7-2a69-42d8bf7cdce2"
      ~ input  = (sensitive value)
      ~ output = "9f82fa8c7610b5f4e4a974b6ba4acd8fe1e44c5c753ad01548273d7c061fdf00" -> (known after apply)
    }

  # module.runner.libvirt_cloudinit_disk.commoninit will be created
  + resource "libvirt_cloudinit_disk" "commoninit" {
      + id             = (known after apply)
      + meta_data      = <<-EOT
            instance-id: runner
            local-hostname: runner
        EOT
      + name           = "runner_commoninit"
      + network_config = (sensitive value)
      + path           = (known after apply)
      + size           = (known after apply)
      + user_data      = (sensitive value)
    }

  # module.runner.libvirt_volume.cloudinit will be replaced due to changes in replace_triggered_by
-/+ resource "libvirt_volume" "cloudinit" {
      ~ allocation = 49152 -> (known after apply)
      ~ capacity   = 49152 -> (known after apply)
      ~ create     = {
          ~ content = {
              ~ url = "/home/user/terraform-provider-libvirt-cloudinit/cloudinit-86070e4489865a53.iso" -> (known after apply)
            }
        }
      ~ id         = "/var/lib/libvirt/images/runner_cloudinit.iso" -> (known after apply)
      ~ key        = "/var/lib/libvirt/images/runner_cloudinit.iso" -> (known after apply)
        name       = "runner_cloudinit.iso"
      ~ path       = "/var/lib/libvirt/images/runner_cloudinit.iso" -> (known after apply)
      ~ physical   = 49152 -> (known after apply)
        # (1 unchanged attribute hidden)
    }

  # module.runner.terraform_data.cloudinit_content will be updated in-place
  ~ resource "terraform_data" "cloudinit_content" {
        id     = "d82d690a-6b8d-a203-d0d2-6bbeaf9f32ae"
      ~ input  = (sensitive value)
      ~ output = "e9556abbc1f37b2c6ef9bd1dff519f27ce12ba568a3a1de2a6900277cfeaac24" -> (known after apply)
    }

Plan: 4 to add, 2 to change, 2 to destroy.