v0.5.0

[0.5.0] - 2026-06-29

Added

• ec2: Add iam_role_policy_arns passthrough for scoped role policies
• automation-roles: GitHub-OIDC → IAM role component for CI
• ec2: Add ami_ssm_parameter for per-instance OS selection
• ec2: Wrap ec2-instance + security-group modules, add named ingress

Fixed

• hooks: Gh-format-guard inspects --body-file content
• ec2: Take VPC CIDR from input, drop live aws_vpc lookup
• automation-roles: Grant ec2:* scoped to deploy_region
• vpc,ec2: Encrypt root EBS, doc + guard NAT/az_count
• compute-engine: Clarify output keying in docs, validate instances keys
• compute-engine: Support multiple VMs via instances map

Changed

• compute-engine: Replace with AWS ec2 component (EC2 + SSM)
• vpc: Rename from network, rewrite as AWS VPC wrapper
• compute-engine: Name VMs -, drop component infix
• compute-engine: Require project_id, default access_members empty

Removed

• components: Restore GCP network + compute-engine alongside AWS