[ci skip] Flatten module wrappers into stack roots

Remove the module "xxx" { source = "./module" } indirection layer
from all 66 service stacks. Resources are now defined directly in
each stack's main.tf instead of through a wrapper module.

- Merge module/main.tf contents into stack main.tf
- Apply variable replacements (var.tier -> local.tiers.X, renamed vars)
- Fix shared module paths (one fewer ../ at each level)
- Move extra files/dirs (factory/, chart_values, subdirs) to stack root
- Update state files to strip module.<name>. prefix
- Update CLAUDE.md to reflect flat structure

Verified: terragrunt plan shows 0 add, 0 destroy across all stacks.

stacks/platform/modules/authentik/main.tf

@@ -14,7 +14,7 @@ resource "kubernetes_namespace" "authentik" {
   metadata {
     name = "authentik"
     labels = {
-      tier                                = var.tier
+      tier                               = var.tier
       "resource-governance/custom-quota" = "true"
     }
   }

stacks/platform/modules/kyverno/resource-governance.tf

@@ -721,12 +721,12 @@ resource "kubernetes_manifest" "mutate_priority_from_tier" {
           mutate = {
             patchesJson6902 = yamlencode([
               {
-                op    = "remove"
-                path  = "/spec/priority"
+                op   = "remove"
+                path = "/spec/priority"
               },
               {
-                op    = "remove"
-                path  = "/spec/preemptionPolicy"
+                op   = "remove"
+                path = "/spec/preemptionPolicy"
               },
               {
                 op    = "add"