Someone on your team runs terraform apply from their laptop. The change goes straight to production. There’s no PR, no review, no record of what changed or why. A week later, something breaks in the landing zone and nobody can explain what happened. You check the Azure activity log and find a …