Provision-time FinOps with Terraform, Infracost, and OPA: a working PR-blocking pipeline

Executive summary The shift: 73% of platform teams now enforce cost policy at provision time, not at invoice time (LeanOps and platformengineering.org, "State of Platform Engineering 2026").[^1] Retr