The four-layer split that keeps multi-brand IaC sane

Where to draw the lines between repo, brand, environment, and leaf — and what each layer is allowed to know about the others.