infra(cloud-init): deliver baseline via bpg user-data snippet; drop netplan/meta-data templates

bpg/proxmox generates cloud-init network-config (static IP/gw/DNS) and
meta-data natively from the VM initialization block, so remove
network-config.yaml.tftpl and meta-data.yaml.tftpl. The rich first-boot
baseline (users, SSH key, packages, kernel modules, Longhorn /dev/vdb
mount, swap-off) is preserved and shipped as a user-data snippet
referenced by initialization.user_data_file_id. Comments updated
(libvirt -> Proxmox); /dev/vdb still valid (data disk is virtio1).

Co-Authored-By: Claude Opus 4.8 <[email protected]>

infra/cloud-init/README.md

@@ -1,8 +1,15 @@
 # infra/cloud-init — first-boot baseline templates
 
-Phase 1 **T-1.2**. The "Baseline" node lifecycle stage (docs/02 stage 2). These
-templates are consumed by the OpenTofu `libvirt_cloudinit_disk` in `../tofu/`
-(via `templatefile()`), one seed per node. **Authoring only — never applied.**
+The "Baseline" node lifecycle stage (docs/02 stage 2). `user-data.yaml.tftpl` is
+rendered by OpenTofu (`templatefile()`) and shipped to Proxmox as a **cloud-init
+user-data snippet** (`proxmox_virtual_environment_file`, one per node), referenced
+by each VM's `initialization.user_data_file_id`. **Authoring only — never applied.**
+
+> Migrated from libvirt: bpg/proxmox generates the cloud-init **network-config**
+> (static IP/gateway/DNS) and **meta-data** natively from the VM's `initialization`
+> block, so the old `network-config.yaml.tftpl` / `meta-data.yaml.tftpl` templates
+> were removed. Only the user-data (this baseline) is still a hand-authored template.
+> Requires the `snippets` content type enabled on the image datastore (see ../tofu/README).
 
 Serves **R-ENV-01** (nodes are "created, baselined, cluster-joined, managed as
 code") and lays the kernel/OS floor ADR-0001 (k3s) + ADR-0002 (Cilium) +
@@ -12,12 +19,11 @@ ADR-0003 (Longhorn) + ADR-0005 (KubeVirt) require.
 - `user-data.yaml.tftpl` — `#cloud-config`: login user + injected SSH **public**
   key, hostname, package baseline, kernel modules, sysctls, Longhorn data-disk
   mount, swap-off.
-- `meta-data.yaml.tftpl` — NoCloud instance-id / local-hostname.
-- `network-config.yaml.tftpl` — netplan v2 **static** IP (DHCP is off on the NAT).
 
 `${...}` tokens are **OpenTofu** template vars filled by `../tofu/main.tf`
-(`hostname`, `fqdn`, `username`, `ssh_authorized_key`, `ip`, `prefix`, `gateway`)
-— they are not cloud-init/Jinja.
+(`hostname`, `fqdn`, `username`, `ssh_authorized_key`) — they are not cloud-init/Jinja.
+IP/gateway/DNS are no longer templated here; bpg/proxmox injects them from the VM's
+`initialization` block.
 
 ## Baseline (cloud-init's job) vs. Ansible's job