The .terraform.lock.hcl file is automatically generated when we run terraform init.
It locks provider versions and includes SHA-256 digests to ensure integrity.
This prevents Terraform from downloading a tampered or unexpected provider binary in future runs.
When we author tf recipes, we should run a tf init and generate this file. We should then include it in the recipe folder so that when radius downloads the folder and runs tf init as part of rad deploy, it already finds a lock file and uses it to ensure the contents of the recipe is not tampered.
cc @DariuszPorowski , @vhiremath