Add V2 physical container volumes

[David Negstad (danegsta)]

Summary

• add the namespaced V2 PhysicalContainerVolume API, validation, generated models/deepcopy/OpenAPI, and registration
• add an ObjectStateMap-backed controller for creating or referencing runtime volumes with durable queued-operation results, namespace gating, monitoring, retries, and finalizer-driven deletion
• align volume ownership with the V2 physical-resource contract, including opt-in collision replacement and unconditional retention of ID-referenced volumes
• wire namespace cleanup, controller startup, test environments, and startup harvesting for abandoned non-persistent created volumes
• document the completed physical volume roadmap item without rewiring PhysicalContainer

Ownership and runtime behavior

spec.volumeID references an existing runtime volume. Referenced volumes are always retained when the API resource is deleted; persistent and replaceExisting are creation-only and rejected with volumeID.

spec.volumeName creates a runtime volume. Created volumes are removed on deletion unless spec.persistent is true. A same-name collision is terminal and non-destructive by default. With spec.replaceExisting, the controller inspects the requested name, removes only the canonical resolved volume, then creates and tracks its replacement. Runtime objects carrying this resource's UID are adopted after uncertain create results or in-memory state loss.

Removal deliberately uses Force: false: Docker does not remove in-use volumes even with force, while Podman force-removes the containers using the volume. In-use or transient removal failures retain controller progress and retry without removing attached containers; not-found removal races are confirmed by reinspection.

Created volumes carry resource ownership, persistence, and creator-process labels. Startup harvesting lists labeled volumes and removes abandoned non-persistent volumes after abandoned containers, also without force.

Validation

• make generate
• make test-prereqs
• focused API, controller, and test-orchestrator tests
• targeted V2 volume integration, durability, ownership, replacement, and harvesting tests
• make lint
• make test
• go test -race -count 1 -parallel 32 -timeout 180s ./test/integration -run 'TestUnusedVolumeHarvesting|TestV2PhysicalContainerVolume'

Stacked on danegsta-danegsta-v2-physical-network.