Skill to write terraform configuration for oci landing zone terraform IAM module

[RITHIKAKATHIR]

Summary

Adds the OCI IAM Landing Zones Terraform skill

The skill supports safe, module-constrained Terraform configuration for:

• Compartment hierarchies
• Classic IAM groups (and assigning existing users)
• Dynamic groups
• IAM policies
• Identity Domains resources

It strictly uses oci-landing-zones/terraform-oci-modules-iam, preserves existing repository structure, and validates inputs/OCIDs via the OCI MCP interface. It explicitly avoids local Terraform execution, managing standalone memberships/users, or handling any resource out of scope for the upstream terraform moULE.e

---

Changes

• **Add SKILL.md along with reference modules (module-support.md, input-collection.md, terraform-sources.md, validation.md, main-tf-map.md, and lifecycle-safety.md).
• Establish lifecycle & safety guardrails: Enforces workflows for additive generation, state-ownership verification, compartment deletion staging, and mandatory user-facing plan review warnings.

---

Capabilities & Scope Boundaries

• In Scope: Creating/updating compartments, classic groups, dynamic groups, IAM policies, and Identity Domains using canonical Git sources.
• Explicitly Out of Scope: Local execution (terraform init/plan/apply), creating classic IAM users, managing standalone group memberships, or managing non-IAM security resources. Unsupported requests trigger a standard rejection message rather than alternative/custom code generation.