Iac

1. Code: one VM per service with OpenTofu and Ansible

   What happens between a new file and a running service, and why I read every plan before I apply it.