feat(storage): migrate 38 NFS PVCs to proxmox-lvm (Wave 2)

Add proxmox-lvm PVCs with pvc-autoresizer annotations for all
remaining single-pod app data services. Deployments updated to
use new block storage PVCs. Old NFS modules retained for rollback.

Services: affine, changedetection, diun, excalidraw, f1-stream,
hackmd, isponsorblocktv, matrix, n8n, send, grampsweb, health,
onlyoffice, owntracks, paperless-ngx, privatebin, resume,
speedtest, stirling-pdf, tandoor, rybbit (clickhouse), tor-proxy
(torrserver), whisper+piper, frigate (config), ollama (ui),
servarr (prowlarr/listenarr/qbittorrent), aiostreams, freshrss
(extensions), meshcentral (data+files), openclaw (data+home+
openlobster), technitium, mailserver (data+roundcube html+enigma),
dbaas (pgadmin).

Strategy set to Recreate where needed for RWO volumes.

stacks/technitium/modules/technitium/main.tf

@@ -92,6 +92,28 @@ module "nfs_config" {
   nfs_path   = "/mnt/main/technitium"
 }
 
+resource "kubernetes_persistent_volume_claim" "config_proxmox" {
+  wait_until_bound = false
+  metadata {
+    name      = "technitium-config-proxmox"
+    namespace = kubernetes_namespace.technitium.metadata[0].name
+    annotations = {
+      "resize.topolvm.io/threshold"     = "80%"
+      "resize.topolvm.io/increase"      = "100%"
+      "resize.topolvm.io/storage_limit" = "5Gi"
+    }
+  }
+  spec {
+    access_modes       = ["ReadWriteOnce"]
+    storage_class_name = "proxmox-lvm"
+    resources {
+      requests = {
+        storage = "1Gi"
+      }
+    }
+  }
+}
+
 resource "kubernetes_deployment" "technitium" {
   # resource "kubernetes_daemonset" "technitium" {
   metadata {
@@ -104,11 +126,7 @@ resource "kubernetes_deployment" "technitium" {
   }
   spec {
     strategy {
-      type = "RollingUpdate"
-      rolling_update {
-        max_unavailable = "0"
-        max_surge       = "1"
-      }
+      type = "Recreate"
     }
     # replicas = 1
     selector {
@@ -207,7 +225,7 @@ resource "kubernetes_deployment" "technitium" {
         volume {
           name = "nfs-config"
           persistent_volume_claim {
-            claim_name = module.nfs_config.claim_name
+            claim_name = kubernetes_persistent_volume_claim.config_proxmox.metadata[0].name
           }
         }
         volume {