fix(baseline): remove generic CPU alert — workload alerts belong per-project

Author: adityataps

providers/gcp/modules/baseline/README.md

@@ -25,7 +25,6 @@ No modules.
 | [google_billing_budget.project](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/billing_budget) | resource |
 | [google_iam_workload_identity_pool.github](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/iam_workload_identity_pool) | resource |
 | [google_iam_workload_identity_pool_provider.github](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/iam_workload_identity_pool_provider) | resource |
-| [google_monitoring_alert_policy.default](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/monitoring_alert_policy) | resource |
 | [google_monitoring_notification_channel.budget_email](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/monitoring_notification_channel) | resource |
 | [google_monitoring_notification_channel.pagerduty](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/monitoring_notification_channel) | resource |
 | [google_project.this](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/project) | resource |

providers/gcp/modules/baseline/monitoring.tf

@@ -1,30 +1,4 @@
-resource "google_monitoring_alert_policy" "default" {
-  project      = google_project.this.project_id
-  display_name = "${var.project_id} — CPU Utilization > 80%"
-  combiner     = "OR"
-  enabled      = true
-
-  conditions {
-    display_name = "GCE instance CPU utilization > 80%"
-    condition_threshold {
-      filter          = "resource.type=\"gce_instance\" AND metric.type=\"compute.googleapis.com/instance/cpu/utilization\""
-      comparison      = "COMPARISON_GT"
-      threshold_value = 0.8
-      duration        = "300s"
-
-      aggregations {
-        alignment_period   = "60s"
-        per_series_aligner = "ALIGN_MEAN"
-      }
-    }
-  }
-
-  notification_channels = compact([
-    google_monitoring_notification_channel.budget_email.id,
-    length(google_monitoring_notification_channel.pagerduty) > 0
-    ? google_monitoring_notification_channel.pagerduty[0].id
-    : null
-  ])
-
-  depends_on = [google_project_service.apis]
-}
+# No baseline-level alert policies — workload alerts belong in each project's
+# own Terraform config, since the right metrics depend on what's running there
+# (Cloud Run, GKE, GCE, etc.). Notification channels are defined above and can
+# be referenced by project-level alert policies via terraform_remote_state.