fixup! vault: implement bootstrap integration

terraform/cloud-init.tf

@@ -17,7 +17,7 @@ resource "proxmox_cloud_init_disk" "ci" {
     - ${each.value.ssh_public_key}
   ${each.value.flake_branch != null || each.value.vault_wrapped_token != null ? <<-FILES
   write_files:
-    - path: /etc/environment
+    - path: /run/cloud-init-env
       content: |
         %{~ if each.value.flake_branch != null ~}
         NIXOS_FLAKE_BRANCH=${each.value.flake_branch}
@@ -27,7 +27,7 @@ resource "proxmox_cloud_init_disk" "ci" {
         VAULT_WRAPPED_TOKEN=${each.value.vault_wrapped_token}
         VAULT_SKIP_VERIFY=1
         %{~ endif ~}
-      append: true
+      permissions: '0600'
   FILES
 : ""}
   EOT