terraform: add dns and homelab-deploy secrets to ns1 policy

ns1 needs access to shared/dns/* for zone transfer key and
shared/homelab-deploy/* for the NATS listener.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

terraform/vault/hosts-generated.tf

@@ -29,6 +29,8 @@ locals {
     "ns1" = {
       paths = [
         "secret/data/hosts/ns1/*",
+        "secret/data/shared/dns/*",
+        "secret/data/shared/homelab-deploy/*",
       ]
     }