infra: add MinimumIal config to Tofu for DC and CO dev environments

Sets MinimumIal env vars on the API container via state_api_environment_variables:
- DC: ApplicationCases=IAL1, CoLoadedStreamlineCases=IAL1, NonCoLoadedStreamlineCases=IAL1plus
- CO: all IAL1 (CO policy — elevated proofing is per-operation, not per-case-origin)

Required for deployment — the app fails to start without these values.

Author: James Blair

tofu/config/dev-co/main.tf

@@ -118,6 +118,9 @@ module "app" {
     "Oidc__StepUp__AuthorizationEndpoint"              = var.oidc_authorization_endpoint
     "Oidc__StepUp__CallbackRedirectUri"                = "https://${var.domain}/callback"
     "StateHouseholdId__PreferredHouseholdIdTypes__0"   = "Phone"
+    "MinimumIal__ApplicationCases"                     = "IAL1"
+    "MinimumIal__CoLoadedStreamlineCases"               = "IAL1"
+    "MinimumIal__NonCoLoadedStreamlineCases"             = "IAL1"
   }
 
   state_api_environment_secrets = {

tofu/config/dev-dc/main.tf

@@ -91,4 +91,10 @@ module "app" {
   seeding_enabled         = "true"
   seeding_email_pattern   = "sebt.dc+{0}@codeforamerica.org"
   use_mock_household_data = "true"
+
+  state_api_environment_variables = {
+    "MinimumIal__ApplicationCases"           = "IAL1"
+    "MinimumIal__CoLoadedStreamlineCases"    = "IAL1"
+    "MinimumIal__NonCoLoadedStreamlineCases" = "IAL1plus"
+  }
 }