tf-module-api-diff — the real semver severity of a Terraform module change

Every shared Terraform module eventually gets a version tag chosen by vibe. The module's public API is just its variables and outputs, both of which are machine-readable: tf-module-api-diff reads them at two refs, tells you the real semver severity of the change, and refuses the tag that lies about it.