v0.57.0 fixup: wire HostReader into the local-API server (was nil in prod)

buildLocalAPIServer never passed Options.HostReader, so s.host was nil — the
v0.56.0 durableIDForMount raw-mount fallback + the role gate's host classification
silently no-op'd. Wire storage.NewProcHostReader(). This makes the raw-drive
intent/guest-bind resolution actually fire live.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

CHANGELOG.md

@@ -11,6 +11,10 @@ re-mount (the drive would show "Leválasztva" in the controller).
   the `/mnt/felhom-drives` bind (AttachDrive wants the raw path). Observe entries still win. Also: an
   Observe failure is no longer fatal (fall through to the mount-table scan) so raw drives re-assert even
   if the PVE view is momentarily unavailable.
+- **Wiring fix (latent):** `buildLocalAPIServer` never passed `Options.HostReader`, so the local-API
+  server's `host` was nil in production — the v0.56.0 `durableIDForMount` raw fallback (and the role gate's
+  host classification) silently no-op'd. Now wired to `storage.NewProcHostReader()`. This is what makes
+  the v0.56.0 + v0.57.0 raw-mount resolutions actually fire live.
 - `go build/vet/test ./...` clean. With v0.56.0 (guest-bind now RECORDED for raw drives) this closes the
   reboot/reconnect guest-bind durability gap for raw drives end-to-end.