Fix VPC connector subnet CIDR requirement

- Change default private_subnet_cidr from /24 to /28
- VPC connectors require exactly /28 subnet mask (16 IP addresses)
- Update variable description to clarify requirement

Author: dcmcand

examples/dev/main.tf

@@ -15,7 +15,7 @@ resource "google_secret_manager_secret" "hrafnar_auth_password" {
 
   labels = {
     environment = var.environment
-    project     = "demo-openteams-ai"
+    project     = "test-${var.name_prefix}-openteams-ai"
     managed_by  = "terraform"
   }
 }
@@ -80,7 +80,7 @@ module "hrafnar_deploy" {
   # Environment and labeling
   labels = {
     environment = var.environment
-    project     = "demo-openteams-ai"
+    project     = "test-${var.name_prefix}-openteams-ai"
     managed_by  = "terraform"
   }
 }

variables.tf

@@ -27,9 +27,9 @@ variable "vpc_cidr" {
 }
 
 variable "private_subnet_cidr" {
-  description = "CIDR block for the private subnet"
+  description = "CIDR block for the private subnet (must be /28 for VPC connector compatibility)"
   type        = string
-  default     = "10.0.1.0/24"
+  default     = "10.0.1.0/28"
 }
 
 variable "enable_nat_gateway" {