Walkthrough: Integrating IaC scans into our GitHub Actions pipeline

We've been using Rapid7 InsightCloudSec for a few weeks to get visibility into our cloud security. I'm trying to move beyond just the dashboard and actually block issues before they get deployed.

Specifically, I want to catch Infrastructure-as-Code problems in our GitHub Actions workflows. Our stack is pretty simple: Docker containers, a couple of Azure services defined in Terraform, and a basic compose file.

I saw the option for "CI/CD Integrations" but got lost in the docs. Can someone show me a real, minimal `github/workflows/` YAML file that runs the IaC scan?

I'm hoping for something like:
```yaml
name: IaC Security Scan
on: [push]
jobs:
rapid7-scan:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
# What goes here to scan our /terraform directory?
```

What do I need to set up on the Rapid7 side first? An API key? And what does the scanner actually output—does it just comment on the PR, or can it fail the build if it finds a critical misconfiguration? 😅