Inject PROXMOX_SSH_PRIVATE_KEY and ADMIN_SSH_PUBLIC_KEY secrets as TF_VAR_ environment variables for CI.
- Separate workflow for push events to dev only - Apply job runs when plan detects changes - Use has_changes output (true/false) instead of exitcode Refs #3