Merge pull request 'fix(vault): rename applications.policies → ops_policies (cms CI was silently missing its R2 policy)' (#4) from claude/fix-cms-ops-policies-key into main

hashicorp-vault/iac/main.tf

@@ -79,7 +79,7 @@ module "app_policies" {
   for_each                   = { for app in var.applications : app.name => app }
   name                       = each.value.name
   envs                       = each.value.envs
-  ops_policies               = each.value.policies
+  ops_policies               = each.value.ops_policies
   service_account_names      = each.value.service_account_names
   service_account_namespaces = each.value.service_account_namespaces
   gitea_app_id               = var.gitea_app_id

hashicorp-vault/iac/variables.tf

@@ -12,7 +12,7 @@ variable "POSTGRES_CREDENTIALS_EDITOR_PASSWORD" {
 variable "applications" {
   type = set(object({
     name                       = string
-    policies                   = optional(list(string), [])
+    ops_policies               = optional(list(string), [])
     service_account_names      = optional(list(string), [])
     service_account_namespaces = optional(list(string), [])
     # Multi-env extension: list of envs this app deploys to. Defaults to ["prod"] for