Terraform Module Registry

All modules proxied through compliance.tf. Operational rules are applied where possible — no framework-specific controls enforced.