fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip]

6d224861 came from a --no-checkout worktree whose empty index made the
commit drop every file except two. This restores 05b50d2b's full tree and
correctly adds stacks/stem95su/gdrive-sync.tf + the service-catalog stem95su
entry. Forward-only (parent=6d224861, no force-push); [ci skip] since the
live infra was never applied from the broken commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

stacks/pvc-autoresizer/main.tf

@@ -0,0 +1,4 @@
+module "pvc_autoresizer" {
+  source = "./modules/pvc-autoresizer"
+  tier   = local.tiers.cluster
+}

stacks/pvc-autoresizer/modules/pvc-autoresizer/main.tf

@@ -0,0 +1,51 @@
+variable "tier" { type = string }
+
+resource "kubernetes_namespace" "pvc_autoresizer" {
+  metadata {
+    name = "pvc-autoresizer"
+    labels = {
+      tier = var.tier
+    }
+  }
+  lifecycle {
+    # KYVERNO_LIFECYCLE_V1: goldilocks-vpa-auto-mode ClusterPolicy stamps this label on every namespace
+    ignore_changes = [metadata[0].labels["goldilocks.fairwinds.com/vpa-update-mode"]]
+  }
+}
+
+resource "helm_release" "pvc_autoresizer" {
+  namespace        = kubernetes_namespace.pvc_autoresizer.metadata[0].name
+  create_namespace = false
+  name             = "pvc-autoresizer"
+  atomic           = true
+  timeout          = 300
+
+  repository = "https://topolvm.github.io/pvc-autoresizer"
+  chart      = "pvc-autoresizer"
+
+  values = [yamlencode({
+    controller = {
+      args = {
+        prometheusURL = "http://prometheus-server.monitoring.svc.cluster.local:80"
+        interval      = "10m"
+      }
+      resources = {
+        requests = {
+          memory = "64Mi"
+          cpu    = "10m"
+        }
+        limits = {
+          memory = "128Mi"
+        }
+      }
+    }
+    webhook = {
+      certificate = {
+        generate = true
+      }
+      pvcMutatingWebhook = {
+        enabled = false
+      }
+    }
+  })]
+}

stacks/pvc-autoresizer/terragrunt.hcl

@@ -0,0 +1,8 @@
+include "root" {
+  path = find_in_parent_folders()
+}
+
+dependency "infra" {
+  config_path  = "../infra"
+  skip_outputs = true
+}