infra: HA-Ressource und Node-Affinity per pve-host statt tofu, Infra-IP im Inventar

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

platform/proxmox/tofu/main.tf

@@ -157,10 +157,5 @@ resource "proxmox_virtual_environment_container" "infra" {
   }
 }
 
-resource "proxmox_haresource" "infra" {
-  for_each    = { for k, v in local.site.containers : k => v if try(v.ha, false) }
-  resource_id = "ct:${each.value.vmid}"
-  state       = "started"
-  comment     = "knaster ${each.key}"
-  depends_on  = [proxmox_virtual_environment_container.infra]
-}
+# HA (Ressource + Node-Affinity-Regel) und Replikation setzt die Ansible-Rolle pve-host per root-SSH.
+# So braucht der tofu-Token kein Sys.Console auf /.