fixup! vault: implement bootstrap integration

terraform/variables.tf

@@ -33,8 +33,7 @@ variable "default_target_node" {
 variable "default_template_name" {
   description = "Default template VM name to clone from"
   type        = string
-  # default     = "nixos-25.11.20260128.fa83fd8"
-  default     = "nixos-25.11.20260131.41e21c"
+  default     = "nixos-25.11.20260131.41e216c"
 }
 
 variable "default_ssh_public_key" {

terraform/vms.tf

@@ -50,6 +50,7 @@ locals {
       cpu_cores = 2
       memory    = 2048
       disk_size = "20G"
+      flake_branch = "vault-bootstrap-integration"
     }
   }
 
@@ -146,4 +147,12 @@ resource "proxmox_vm_qemu" "vm" {
     source = "/dev/urandom"
     period = 1000
   }
+
+  # Lifecycle configuration
+  lifecycle {
+    ignore_changes = [
+      clone,           # Template name can change without recreating VMs
+      startup_shutdown, # Proxmox sets defaults (-1) that we don't need to manage
+    ]
+  }
 }