597c127cc4
Current NFS exports on the Debian NAS (10.250.50.50) use root_squash, which blocks PBS from writing its datastore metadata (chunks, locks, GC state — all root-owned operations). Rest-server-ana worked around this by running its container as UID 1000, but PBS's service model doesn't accommodate that pattern cleanly. Solution baked into Phase 0: create a dedicated NFS export for the PBS-ANA datastore subtree, scoped to only the PBS-ANA VM's IP, with no_root_squash. Bounded exposure (single client), kept in a separate .exports file so Cockpit's File Sharing module doesn't clobber it. Flag world-scoped export on /mnt/pve-VMStorage as a non-blocking hygiene item for a later Cockpit pass.