chore: WIP dedicated networked-project setup that works without StackitNetworkArea tag on LZ level

[j0g3sc]

Uses instead a dedicated "networked project BB" variant like so:

# One STACKIT Project building block definition plus landing zone per project variant. The
# `networked` variant carries the `networkArea` label as a static building block input, so projects
# are placed in the network area without any landing zone tag lookup at run time.
locals {
  project_variants = merge(
    {
      default = {
        bbd_display_name         = "STACKIT Project"
        landingzone_display_name = "STACKIT Default"
        landingzone_description  = "Default landing zone for STACKIT projects."
        network_area_id          = null
      }
    },
    var.stackit_networked_projects_enabled ? {
      networked = {
        bbd_display_name         = "STACKIT Networked Project"
        landingzone_display_name = "STACKIT Networked"
        landingzone_description  = "STACKIT landing zone whose projects are placed in the network area."
        network_area_id          = var.stackit_network_area_id
      }
    } : {}
  )
}

[github-actions]

Scorecard Check

Scorecard run on commit 9634d6d5f0c616cb617e26a08e6d22f5a4fcabf2 relative to origin/main

📊 meshstack-hub Module Scorecard

Generated: 2026-08-05 | Modules scanned: 1 | Categories: 5

📋 Per-Module Category Summary

Score per category per building block. n/a = category does not apply to this module.

Module	Overall	Core Structure	Integration	Azure Backplane	STACKIT Backplane	Testing
stackit/project	🟢 81%	🟢 100%	🟡 79%	n/a	🟢 100%	🔴 33%

⚠️ 1 module has failing checks — failing categories are expanded below.

Core Structure — ✅ all passing

Basic module file structure and documentation — applies to 1 modules

Module	Score	📦	🔗	📋	📝	🖼️	📌	🔒
stackit/project	🟢 100%	✅	✅	➖	✅	✅	✅	✅

Core Structure — Summary

Emoji	Criterion	Coverage	Status
📦	buildingblock/ directory exists	1/1	🟢 100%
🔗	meshstack_integration.tf present	1/1	🟢 100%
📋	buildingblock/APP_TEAM_README.md present (no-integration fallback)	n/a	—
📝	buildingblock/README.md with YAML front-matter	1/1	🟢 100%
🖼️	buildingblock/logo.png included	1/1	🟢 100%
📌	buildingblock/versions.tf present	1/1	🟢 100%
🔒	Provider versions use minimum constraint (>=)	1/1	🟢 100%

Integration — some checks failing

meshstack_integration.tf conventions — applies to 1 modules

Module	Score	🏷️	🏢	📤	🔌	📎	🔀	📋	🏷️	🧱	📖	📝	📊	🚫	🔄
stackit/project	🟡 79%	✅	✅	✅	✅	✅	✅	✅	✅	✅	❌	❌	❌	✅	✅

Integration — Summary

Emoji	Criterion	Coverage	Status
🏷️	variable "hub" in integration	1/1	🟢 100%
🏢	variable "meshstack" in integration	1/1	🟢 100%
📤	building_block_definition output exposed	1/1	🟢 100%
🔌	meshcloud/meshstack in required_providers	1/1	🟢 100%
📎	backplane source uses var.hub.git_ref	1/1	🟢 100%
🔀	ref_name uses var.hub.git_ref	1/1	🟢 100%
📋	version_spec.draft uses var.hub.bbd_draft	1/1	🟢 100%
🏷️	BBD metadata.tags forwards var.meshstack.tags	1/1	🟢 100%
🧱	BBD input argument vars with optional() have explicit defaults	1/1	🟢 100%
📖	BBD readme field present	0/1	🔴 0%
📝	BBD readme starts with plain-text description (no heading)	0/1	🔴 0%
📊	BBD readme has shared responsibility table (✅/❌)	0/1	🔴 0%
🚫	No documentation_md output in backplane	1/1	🟢 100%
🔄	meshstack_platform has lifecycle ignore_changes = [availability]	1/1	🟢 100%

Azure Backplane — not applicable

Azure UAMI-based automation principal conventions — applies to 0 modules

No applicable modules.

STACKIT Backplane — ✅ all passing

STACKIT WIF-based automation principal conventions — applies to 1 modules

Module	Score	🔐	🚫	📤	⚡
stackit/project	🟢 100%	✅	✅	✅	✅

STACKIT Backplane — Summary

Emoji	Criterion	Coverage	Status
🔐	Uses stackit_service_account_federated_identity_provider	1/1	🟢 100%
🚫	No stackit_service_account_key resource	1/1	🟢 100%
📤	Outputs service_account_email (not key)	1/1	🟢 100%
⚡	Buildingblock provider uses use_oidc = true	1/1	🟢 100%

Testing — some checks failing

End-to-end test coverage — applies to 1 modules

Module	Score	⚙️	🧪	✅
stackit/project	🔴 33%	✅	❌	❌

Testing — Summary

Emoji	Criterion	Coverage	Status
⚙️	backplane/ directory (optional tier)	1/1	🟢 100%
🧪	e2e/ test directory exists	0/1	🔴 0%
✅	e2e/ contains .tftest.hcl files	0/1	🔴 0%

[aws-amplify-eu-central-1]

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-244.d1o16zfeoh2slu.amplifyapp.com