stage
master
Use terraform plan -refresh=false in plan/apply workflows to avoid slow Proxmox state refresh on every push. This keeps CI fast while preserving apply behavior from the generated plan.
Use --use-remote-sudo in rebuild script since the runner's nixos-rebuild does not support --sudo yet.