Terraform CI/CD: Plan on PR, Apply on Merge

The pipeline ran terraform apply against a saved plan file. What it didn't account for: another engineer had merged a change to the same module forty minutes earlier. The plan was generated before tha