fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip]

6d224861 came from a --no-checkout worktree whose empty index made the
commit drop every file except two. This restores 05b50d2b's full tree and
correctly adds stacks/stem95su/gdrive-sync.tf + the service-catalog stem95su
entry. Forward-only (parent=6d224861, no force-push); [ci skip] since the
live infra was never applied from the broken commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

scripts/stop_storage_services.sh

@@ -0,0 +1,48 @@
+#!/usr/bin/env bash
+
+# Stop services that may become in a corrupted state if storage is suddenly disconnected
+
+
+set -euxo pipefail
+
+function scale() { kubectl scale deployment --replicas=$3 --namespace $1 $2; }
+
+### ============================
+### MAIN
+### ============================
+cmd="${1:-stop}"
+case "$cmd" in
+  stop)
+    scale redis redis 0
+    scale uptime-kuma uptime-kuma 0
+    scale paperless-ngx paperless-ngx 0
+    scale vaultwarden vaultwarden 0
+    scale immich immich-postgresql 0
+    scale nextcloud nextcloud 0
+    scale monitoring prometheus-server 0
+
+    scale technitium technitium 0
+    scale dbaas mysql 0
+    scale dbaas postgresql 0
+    ;;
+  start)
+    scale dbaas mysql 1
+    scale dbaas postgresql 1
+    scale technitium technitium 1
+    scale immich immich-postgresql 1
+    scale nextcloud nextcloud 1
+    scale paperless-ngx paperless-ngx 1
+    scale monitoring prometheus-server 1
+    scale redis redis 1
+    scale uptime-kuma uptime-kuma 1
+    scale vaultwarden vaultwarden 1
+    ;;
+    # echo "[!] Cleanup only removes links (not flushing all iptables to avoid surprises)."
+    # ip netns list | grep -qw "$NS_NAME" && sudo ip netns del "$NS_NAME" || true
+    # has_link "$HOST_VETH" && sudo ip link del "$HOST_VETH" || true
+    # ;;
+  *)
+    echo "Usage: $0 [stop|start]"
+    exit 1
+    ;;
+esac