chore(terragrunt): disable live lockfile generation with readonly init flag

Author: j4y

terragrunt/live/website/terragrunt.hcl

@@ -3,6 +3,15 @@ include "root" {
 }
 
 terraform {
+  # Prevent OpenTofu/Terraform from generating a .terraform.lock.hcl file
+  # inside the live Terragrunt directory. Live folders do not own provider
+  # versions — the module lockfile in terraform/website/ is the single
+  # source of truth. Without this flag, `terragrunt init` would create a
+  # local lockfile here, causing CI to detect uncommitted changes.
+  extra_arguments "disable_lockfile" {
+    commands = ["init"]
+    arguments = ["-lockfile=readonly"]
+  }
   source = "../../../terraform/website/"
 }