* feat(terraform): add hcp terraform for prod door-unlock-api
Move deploy off frozen CDK CD onto an HCP workspace that recreates the HTTP API, five Lambdas, disabled EventBridge rules, and alarms in seahaven-prod without a poller VPC.
* docs(readme): link the door unlock api ops page
* fix(terraform): invoke package build via bash
HCP launches the external data source with bash, so the inner build script should not depend on the git executable bit.
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
* chore: add .env to .gitignore