[ci skip] Flatten module wrappers into stack roots

Remove the module "xxx" { source = "./module" } indirection layer
from all 66 service stacks. Resources are now defined directly in
each stack's main.tf instead of through a wrapper module.

- Merge module/main.tf contents into stack main.tf
- Apply variable replacements (var.tier -> local.tiers.X, renamed vars)
- Fix shared module paths (one fewer ../ at each level)
- Move extra files/dirs (factory/, chart_values, subdirs) to stack root
- Update state files to strip module.<name>. prefix
- Update CLAUDE.md to reflect flat structure

Verified: terragrunt plan shows 0 add, 0 destroy across all stacks.

stacks/homepage/module/values.yaml

@@ -1,155 +0,0 @@
-image:
-  repository: ghcr.io/gethomepage/homepage
-  tag: v1.8.0
-
-# Enable RBAC. RBAC is necessary to use Kubernetes integration
-enableRbac: true
-
-extraClusterRoles:
-  # - apiGroups:
-  #   - some-group
-  #   resources:
-  #   - some-resource
-  #   verbs:
-  #   - get
-
-serviceAccount:
-  # Specify a different service account name. When blank it will default to the release
-  # name if *create* is enabled, otherwise it will refer to the default service account.
-  name: ""
-  # Create service account. Needed when RBAC is enabled.
-  create: false
-
-service:
-  main:
-    ports:
-      http:
-        port: 3000
-
-controller:
-  strategy: RollingUpdate
-  rollingUpdate:
-    maxSurge: 25%
-    maxUnavailable: 25%
-
-# Enable the ingress to expose Homepage to the network.
-ingress:
-  main:
-    enabled: true
-    labels:
-      # This label will enable discover of this deployment in Homepage
-      gethomepage.dev/enabled: "true"
-    annotations:
-      # These annotations will configure how this deployment is shown in Homepage
-      gethomepage.dev/name: "Homepage"
-      gethomepage.dev/description: "A modern, secure, highly customizable application dashboard."
-      gethomepage.dev/group: "A New Group"
-      gethomepage.dev/icon: "homepage.png"
-    ingressClassName: "traefik"
-    hosts:
-      - host: &host "home.viktorbarzin.me"
-        paths:
-          - path: /
-            pathType: Prefix
-    tls:
-      - hosts:
-          - *host
-        secretName: ${tls_secret_name}
-
-# All the config files for Homepage can be specified under their relevant config block.
-config:
-  # To use an existing ConfigMap uncomment this line and specify the name
-  # useExistingConfigMap: existing-homepage-configmap
-  bookmarks:
-    - Developer:
-        - Github:
-            - abbr: Viktor Barzin
-              href: https://github.com/viktorbarzin
-  services:
-    # - My First Group:
-    #     - My First Service:
-    #         href: http://localhost/
-    #         description: Homepage is awesome
-
-    # - My Second Group:
-    #     - My Second Service:
-    #         href: http://localhost/
-    #         description: Homepage is the best
-
-    # - My Third Group:
-    #     - My Third Service:
-    #         href: http://localhost/
-    #         description: Homepage is 😎
-  widgets:
-    - resources:
-        # change backend to 'kubernetes' to use Kubernetes integration. Requires RBAC.
-        # backend: resources
-        backend: kubernetes
-        expanded: true
-        cpu: true
-        memory: true
-    - search:
-        provider: duckduckgo
-        target: _blank
-    ## Uncomment to enable Kubernetes integration
-    - kubernetes:
-        cluster:
-          show: true
-          cpu: true
-          memory: true
-          showLabel: true
-          label: "cluster"
-        nodes:
-          show: true
-          cpu: true
-          memory: true
-          showLabel: true
-  kubernetes:
-    # change mode to 'cluster' to use RBAC service account
-    # mode: disable
-    mode: cluster
-  docker:
-  settings:
-
-# -- Main environment variables. Template enabled.
-# Syntax options:
-# A) TZ: UTC
-# B) PASSWD: '{{ .Release.Name }}'
-# C) PASSWD:
-#      configMapKeyRef:
-#        name: config-map-name
-#        key: key-name
-# D) PASSWD:
-#      valueFrom:
-#        secretKeyRef:
-#          name: secret-name
-#          key: key-name
-#      ...
-# E) - name: TZ
-#      value: UTC
-# F) - name: TZ
-#      value: '{{ .Release.Name }}'
-env:
-  HOMEPAGE_ALLOWED_HOSTS: home.viktorbarzin.me
-
-
-# To include environment variables from other configs or other secrets for use in
-# Homepage's variable substitutions. Refer to them here.
-# envFrom:
-#   - secretRef:
-#       name: my-secret
-#   - configMapRef:
-#       name: my-configmap
-
-persistence:
-  logs:
-    enabled: true
-    type: emptyDir
-    mountPath: /app/config/logs
-# resources:
-#   requests:
-#     memory: 10Mi
-#     cpu: 10m
-#   limits:
-#     memory: 200Mi
-#     cpu: 500m