You’re looking at it — Astro app deployed to Cloud Run through a 3-stage GitHub Actions pipeline (build → artifact → deploy), keyless auth via Workload Identity Federation, infra fully defined in Terraform. DNS on Route 53.

Every piece of infrastructure — the Cloud Run service, the Artifact Registry repo, and the Workload Identity Federation trust relationship that lets GitHub Actions deploy without a stored key — is provisioned by Terraform, not clicked together by hand. The `.claude/` directory isn’t just checked-in scaffolding either: its hooks, skills, and reviewer/writer agents were actually exercised building this, including one hook bug found, fixed, and backported to the template repo this project was scaffolded from.

Astro · TypeScript · Terraform · GCP Cloud Run · GitHub Actions