[MEDIUM] Terraform data resources publicly reachable

[ibuyspy]

\infra/modules/database/main.tf:49\ has \public_network_access_enabled = true. \infra/modules/storage/main.tf:19\ also has public network enabled.

Fix: Move to private networking/private endpoints or narrowly scoped firewall controls.
Source: DevOps audit