feat(deploy): aibook.fun deploy layer (terraform + ansible + docker on DO)

deploy/terraform/backend.tf

@@ -0,0 +1,25 @@
+# aibook-fun - Terraform Backend Configuration
+# State stored in DigitalOcean Spaces (S3-compatible) for team sharing, SSE-C
+# encrypted at rest.
+#
+# Pass credentials via itofu.sh (preferred) or -backend-config flags:
+#   access_key / secret_key / sse_customer_key
+# Backend config cannot reference Terraform variables — itofu.sh forwards them.
+
+terraform {
+  backend "s3" {
+    endpoint = "https://atl1.digitaloceanspaces.com"
+    bucket   = "weown-tools-state"
+    key      = "aibook-fun/aibook-fun.tfstate"
+    region   = "us-east-1"
+    encrypt  = true
+    acl      = "private"
+
+    # Required for DO Spaces (S3-compatible but not AWS)
+    skip_credentials_validation = true
+    skip_metadata_api_check     = true
+    skip_requesting_account_id  = true
+    skip_region_validation      = true
+    skip_s3_checksum            = true
+  }
+}