fix: add depends_on to storage class to wait for EKS access entry

The storage class had no implicit dependency on the EKS module
(it only references locals from remote state). Terraform created it
in parallel with the access entry, racing the RBAC propagation.

Author: ausbru87

infra/terraform/3-eks/storage.tf

@@ -21,4 +21,9 @@ resource "kubernetes_storage_class_v1" "gp3_encrypted" {
     encrypted = "true"
     kmsKeyId  = local.kms_key_arn
   }
+
+  # Wait for EKS access entry to propagate before talking to the
+  # K8s API. Without this, the storage class creation races the
+  # RBAC grant and fails with "forbidden."
+  depends_on = [module.eks]
 }