fix(GRO-693): add UAT Terraform infrastructure with correct GitRepository

- Add terraform workspace at apps/overlays/uat/terraform/ (backend.tf,
  main.tf, variables.tf, users.tf, imports.tf, terraform.tfvars)
- Add Terraform CRD (authentik-terraform.yaml) with correct path
  ./apps/overlays/uat/terraform relative to groombook/app repo root
- Add GitRepository CRD (gitrepository-groombook.yaml) pointing to
  groombook/app at fix/gro-844-network-policy branch (NOT groombook/infra
  which no longer exists)
- Add kustomization.yaml to tie it together

Root cause: the GitRepository was pointing to https://github.com/groombook/infra
which no longer exists, and the terraform files were not committed to the
current repository at the correct path.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

apps/overlays/uat/terraform/variables.tf

@@ -0,0 +1,33 @@
+# =============================================================================
+# Variables for Authentik groombook-uat Terraform workspace
+# =============================================================================
+
+variable "authentik_url" {
+  description = "Base URL of the Authentik instance"
+  type        = string
+  default     = "https://auth.farh.net"
+}
+
+variable "authentik_token" {
+  description = "API token for Authentik (from authentik-credentials secret via AUTHENTIK_TOKEN env var)"
+  type        = string
+  sensitive   = true
+}
+
+variable "uat_super_password" {
+  description = "Password for the UAT Super User account"
+  type        = string
+  sensitive   = true
+}
+
+variable "uat_groomer_password" {
+  description = "Password for the UAT Groomer staff account"
+  type        = string
+  sensitive   = true
+}
+
+variable "uat_customer_password" {
+  description = "Password for the UAT Customer account"
+  type        = string
+  sensitive   = true
+}