tofu(proxmox): API-only native cloud-init; move node baseline to Ansible node_baseline role

Co-Authored-By: Claude Opus 4.8 <[email protected]>

infra/ansible/roles/node_baseline/defaults/main.yml

@@ -0,0 +1,17 @@
+---
+# node_baseline — first-boot floor for k3s/Cilium/Longhorn, moved out of cloud-init
+# (Proxmox provisioning is API-only). Runs before k3s (site.yml). Idempotent.
+node_baseline_packages:
+  - qemu-guest-agent
+  - open-iscsi
+  - nfs-common
+  - curl
+node_baseline_kernel_modules:
+  - overlay
+  - br_netfilter
+  - iscsi_tcp
+  - dm_crypt
+  - nfs
+node_baseline_longhorn_device: /dev/vdb
+node_baseline_longhorn_mount: /var/lib/longhorn
+node_baseline_longhorn_fs_label: longhorn