[ci skip] migrate 29 services from inline NFS to CSI-backed PV/PVC

Batch migration of all single-volume and simple multi-volume stacks.
All services verified healthy after migration. Uses nfs-truenas
StorageClass with soft,timeo=30,retrans=3 mount options to eliminate
stale NFS mount hangs.

Services: atuin, audiobookshelf, calibre, changedetection, diun,
excalidraw, forgejo, freshrss, grampsweb, hackmd, health,
isponsorblocktv, matrix, meshcentral, n8n, navidrome, ntfy, ollama,
onlyoffice, owntracks, paperless-ngx, poison-fountain, send,
stirling-pdf, tandoor, wealthfolio, whisper, woodpecker, ytdlp

stacks/woodpecker/main.tf

@@ -101,11 +101,18 @@ resource "kubernetes_persistent_volume" "woodpecker_server_data" {
     capacity = {
       storage = "10Gi"
     }
-    access_modes = ["ReadWriteOnce"]
+    access_modes                     = ["ReadWriteOnce"]
+    persistent_volume_reclaim_policy = "Retain"
+    storage_class_name               = "nfs-truenas"
+    volume_mode                      = "Filesystem"
     persistent_volume_source {
-      nfs {
-        server = var.nfs_server
-        path   = "/mnt/main/woodpecker"
+      csi {
+        driver        = "nfs.csi.k8s.io"
+        volume_handle = "woodpecker-server-data"
+        volume_attributes = {
+          server = var.nfs_server
+          share  = "/mnt/main/woodpecker"
+        }
       }
     }
     claim_ref {