fix: correct gitignore patterns for terraform state and cache

Remove malformed line and clarify rules:
- terraform/.terraform/ (local provider cache)
- terraform/*.tfstate* (local state backups)
- skills-lock.json (lock file)

All TF state now remote (MinIO S3), local files safe to exclude.

.gitignore

@@ -37,9 +37,11 @@ k8s/storage/test/test
 
 # Allowed markdown: CLAUDE.example.md, README.md, TROUBLESHOOTING.md
 CLAUDE.md
-.terraform/
-skills-lock.jsonterraform/.terraform/
-terraform/*.tfstate*
-terraform.tfvars.local
 
-.tfstate
+# Terraform state and cache (local files, remote state in MinIO)
+.terraform/
+terraform/.terraform/
+terraform/*.tfstate
+terraform/*.tfstate.*
+terraform.tfvars.local
+skills-lock.json