chore: pre-migration snapshot

Layer0, MCP servers, Terraform consolidation

terraform/variables.tf

@@ -64,3 +64,15 @@ variable "blocked_countries" {
   type        = list(string)
   default     = ["CN", "RU", "KP", "IR"]
 }
+
+variable "enable_managed_waf" {
+  description = "Enable Cloudflare managed WAF rulesets (requires WAF entitlement; typically not available on Free plan)."
+  type        = bool
+  default     = true
+}
+
+variable "enable_bot_management" {
+  description = "Enable Cloudflare Bot Management settings (requires Bot Management entitlement)."
+  type        = bool
+  default     = false
+}