fix: add .gitignore to prevent committing .terraform/ and other artifacts

fix: run terraform before build to ensure ECR exists on first deploy

fix: make CloudFront invalidation non-fatal

fix: add vite-env.d.ts for import.meta.env types

fix: add tsconfig.json, vite.config.ts, index.css

fix: move AWS credentials before Terraform init in frontend deploy

fix: quote AWS_ACCOUNT_ID to preserve leading zero

fix: use project slug for ECR/ECS/S3 names (not FQDN)

feat: enforce auth on all /api/* routes via router dependency

fix: separate project_name (short slug) from domain_name (FQDN)

fix: use shared wildcard cert + demo.apex.hcls.aws.dev domain

fix: expand single-line Terraform blocks

feat: complete Terraform infrastructure

fix: use ECR Public for Python base image

fix: use project-apex-2025 CodeBuild runner