feat: Swapped tofu init scripting for ansible scripting

infra/terraform.tfvars.example

@@ -2,18 +2,13 @@
 # never commit real values there.
 #
 # The Hetzner API token is NOT set here: export it as HCLOUD_TOKEN in your shell
-# before running tofu plan/apply.
+# before running tofu plan/apply. The same token and SSH key are used again by
+# Ansible afterwards - see ../ansible/README.md.
 
 # Names of SSH keys already uploaded to your Hetzner Cloud project
 # (Console > Security > SSH Keys). All of them are installed on every server. Required.
 ssh_key_names = ["your-key-name", "laptop", "phone"]
 
-# Local path to the private key matching ONE of ssh_key_names above (doesn't need
-# to be all of them - just one you hold). OpenTofu uses this once per server to
-# upload and run the post-install bootstrap script
-# (infra/scripts/bootstrap.sh.tftpl) immediately after creation. Required.
-ssh_private_key_path = "~/.ssh/id_ed25519"
-
 # Optional overrides - defaults live in variables.tf
 # location               = "nbg1"
 # dev_server_type        = "cx22"
@@ -22,6 +17,4 @@ ssh_private_key_path = "~/.ssh/id_ed25519"
 # dev_volume_size        = 20
 # prod_volume_size       = 20
 # allowed_ssh_source_ips = ["203.0.113.4/32"]
-# deploy_user             = "deploy"
-# dev_runner_count       = 3
 # dns_zones              = ["luke-else.co.uk", "divine-couture.co.uk", "snexo.co.uk"]