chore: fix terraform backend config and commit provider lock file

Author: spbsoluble

.gitignore

@@ -25,7 +25,6 @@ terraform/.terraform/
 terraform/terraform.tfstate
 terraform/terraform.tfstate.backup
 terraform/terraform.tfvars
-terraform/.terraform.lock.hcl
 
 # Credentials — never commit
 .env*

terraform/.terraform.lock.hcl

@@ -1,10 +1,4 @@
-# Populated by terraform/bootstrap — run bootstrap first, then:
-#   terraform init -backend-config=backend.hcl
-#
-# To use local state instead, remove the backend block from providers.tf
-# and run: terraform init
-
-resource_group_name  = "rg-tf-state"
-storage_account_name = "stkeyfactortfstate"
+resource_group_name  = "rg-keyfactor-github-tfstate"
+storage_account_name = "kfghtfstatesn84ro"
 container_name       = "tfstate"
-key                  = "certinext-caplugin/terraform.tfstate"
+key                  = "github/repos/certinext-caplugin/terraform.tfstate"

terraform/backend.hcl

@@ -12,10 +12,9 @@ terraform {
     }
   }
 
-  # Remote state in Azure Blob Storage — run bootstrap first, then:
-  #   terraform init -backend-config=backend.hcl
-  # To use local state instead (no bootstrap required):
-  #   remove this backend block and run: terraform init
+  # Remote state in Azure Blob Storage (shared with other plugin repos).
+  # The backend storage account is managed by the bootstrap in keyfactor-acme-lab.
+  # Run: terraform init -backend-config=backend.hcl
   backend "azurerm" {}
 }