deploy using terraform

- remove some apps (cowsay, transparency, estargz)
- start to move DNS zone management into TF too (optional)
- update GH workflow to deploy using TF

TODO:
- store state in GCS
- define one-time setup to grant GHA SA permissions it needs to deploy
- documentation for Future Jason
- cosign_verify base images
- cosign_sign images and cosign_verify before deploy

cmd/wait/deploy.sh

@@ -1,14 +0,0 @@
-#!/usr/bin/env bash
-
-set -euxo pipefail
-
-gcloud run deploy wait \
-  --project=kontaindotme \
-  --region=us-central1 \
-  --allow-unauthenticated \
-  --set-env-vars=BUCKET=kontaindotme \
-  --image=$(KO_DOCKER_REPO=gcr.io/kontaindotme ko publish -P ./cmd/wait) \
-  --memory=1Gi \
-  --cpu=1 \
-  --concurrency=80 \
-  --timeout=60 # 1m