terraform: fix server_type to cpx22 (cpx11/cpx21 retired in nbg1); add lock file

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

terraform/.terraform.lock.hcl

@@ -0,0 +1,23 @@
+# This file is maintained automatically by "tofu init".
+# Manual edits may be lost in future updates.
+
+provider "registry.opentofu.org/hetznercloud/hcloud" {
+  version     = "1.64.0"
+  constraints = "1.64.0"
+  hashes = [
+    "h1:FUkTfFrWlmv0JhsbjQvTk3zY7A2Q0LuoSs0PKEzaLpk=",
+    "zh:5bf7f8f429b1a8f485988d199f46295676a6cdf7d84ad11f1f4613faecfa89d5",
+    "zh:63b3d182474dd5afd0d5ab3f5f66228b752504436bcb2f4721bd6f1233d0f2ae",
+    "zh:6867da2d89d297b6760d80dde373e74df511bea72f7daccf6a944a9de4b4d4ed",
+    "zh:766fdcea1b03038a92414eafaa430b9ac0c57b36ce4c1573e6e291431659d528",
+    "zh:7f3186dfcae4028eac4f2c9c2c382b49c1fad0b63d0471b50748ee6817fbd8d2",
+    "zh:bb8a33b6ff9a4d3bce87628c49b08a4780e2c034762f40112058d96f5a4e52bd",
+    "zh:cc93751c7c90a37f180cf3e5439ed34f3154e60de5920a13d153d93954938239",
+    "zh:d6e2abf05a0eb8fe0544eb099960a4962db61532e7757016ccacbf0b83bcd1ae",
+    "zh:da9e3adedd8d33623aac4929fa8b1210f98d2931d5737c201da0dda992dd25ab",
+    "zh:dffc931aec4d7b0733690e115b1aabdf5c157b7d347a09a9d149ee6b7e9d8ce3",
+    "zh:e565dea4f28182099a271f794e3b781f069ea54976f5f05dbb79a1c2b6627459",
+    "zh:e79411287af28ccf6187bd418b7ea2ee217e642026392ddc8027bf3e3287fb80",
+    "zh:f5102d7141a04c193dffbb5cbc3f7e3588c41b87e11877d2e20d57ea5ef64123",
+  ]
+}

terraform/variables.tf

@@ -7,12 +7,13 @@ variable "location" {
 variable "server_type" {
   description = <<-EOT
     Hetzner server type. Must be x86 — the flake is x86_64-linux; NEVER use cax* (ARM).
-    cpx11 = AMD 2 vCPU / 2 GB (default; dedicated vCPU, NVMe — the orchestrator loops runtime).
-    cpx21 = AMD 3 vCPU / 4 GB (upgrade if claude sessions OOM under cpx11).
-    cx22  = AMD 2 vCPU / 4 GB (shared vCPU, cheaper alternative with more RAM).
+    cpx22 = AMD 2 vCPU / 4 GB (default; dedicated vCPU, NVMe — the orchestrator loops runtime).
+    cpx32 = AMD 4 vCPU / 8 GB (upgrade if more CPU headroom needed).
+    cx23  = Intel 2 vCPU / 4 GB (shared vCPU, cheaper alternative).
+    Note: cpx11/cpx21 are retired in nbg1.
   EOT
   type        = string
-  default     = "cpx11"
+  default     = "cpx22"
 
   validation {
     condition     = !startswith(var.server_type, "cax")