This also solves the issue I had that pre-commit hooks wouldn't work without terraform init in self-hosted dir. And terraform init couldn't work without AWS login

I think we should make sure that this is being run only once, e.g. by introducing a hasRun ref, like in native/components/version-supported.react.js

Related comment from @ashoat: https://phab.comm.dev/D12272#inline-72196

Good idea. Added comment to persist.js

Add missing uncommitted change

Add new metadata to CORS headers

Not sure if using SOPS isn't an overkill for self-hosted keyservers (sops main advantages are for secrets stored in git repos), but let's keep it for now, we can simplify it later by e.g. using gitignored plaintext env files or terraform variable files.

Newline. Rebase before landing

CI seems unrelated

CI failure unrelated

CI failure unrelated

Unrelated CI failure

• Renamed identity logout type to legacy
• Got rid of useMemo
• Made object declaration top-level

In D12172#347646, @varun wrote:

should we create backlog tasks for the crates that aren't being inherited from the workspace root? in particular, it would be great to get all our crates on the same version of tonic

Rebase before landing

Rebase before landing

Address feedback

In D12212#347677, @ashoat wrote:

The only changes here after the rebase are code comments – did you accidentally commit the actual code changes separately?