Talos Linux Terraform provider (siderolabs/talos) — machine secrets, machine configuration, config apply, bootstrap, and the sidero-blessed production pattern (live secrets + patch-based config, upgrades owned elsewhere).