slice 8C Phase B.2 + C.1/C.2: retire disk subsystem + rewire disk mgmt to agent

Retired (~12.3k LOC): internal/storage/* (scan/format/attach/migrate/safety),
backup restic/crossdrive/restore_drives/disk_layout/local_infra/restore_scan/
paths + restore_app, report/infra_backup*/infra_pull, setup/scanner,
monitor/watchdog+pinger, web/storage_handlers+handler_restore. Surgically split
backup.Manager to app-data only (DB dumps + volume tars + app restore; dropped
restic + cross-drive + snapshot history). Fixed router/main/web wiring.
Added agent-backed disk API (web/agent_disk_handlers.go): /api/disks list/
assign/eject/format proxying agentapi; data-bearing format refusal -> HTTP 409
'operator authorization required'. report/config_pull.go keeps the setup
fresh-install config download. go build + go test green.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

controller/internal/report/builder.go

@@ -6,8 +6,6 @@ import (
 	"fmt"
 	"log"
 	"os"
-	"strconv"
-	"strings"
 	"time"
 
 	"gitea.dooplex.hu/admin/felhom-controller/internal/backup"
@@ -241,32 +239,16 @@ func buildBackupReport(cfg *config.Config, backupMgr *backup.Manager) BackupRepo
 		return br
 	}
 
+	// Disk-tier backup (restic snapshots, integrity check, repo stats) has moved to
+	// the host agent (slice 8C). The controller report now covers only app-data backup
+	// (database dumps); restic/snapshot/integrity fields are left zero.
 	nextDBDump := scheduler.NextDailyRun(cfg.Backup.DBDumpSchedule)
-	nextBackup := scheduler.NextDailyRun(cfg.Backup.ResticSchedule)
-	status := backupMgr.GetFullStatus(nextDBDump, nextBackup)
+	status := backupMgr.GetFullStatus(nextDBDump)
 
 	if status.LastDBDump != nil {
 		t := status.LastDBDump.LastRun
 		br.LastDBDump = &t
 	}
-	if status.LastBackup != nil {
-		t := status.LastBackup.LastRun
-		br.LastSnapshot = &t
-	}
-	if status.RepoStats != nil {
-		br.SnapshotCount = status.RepoStats.SnapshotCount
-		br.RepoSizeMB = parseSizeToMB(status.RepoStats.TotalSize)
-	}
-	if !status.LastCheckTime.IsZero() {
-		t := status.LastCheckTime
-		br.LastIntegrityCheck = &t
-	}
-	br.IntegrityOK = status.LastCheckOK
-
-	// Include restic password for hub-side disaster recovery
-	if pw, err := backupMgr.GetResticPassword(); err == nil {
-		br.ResticPassword = pw
-	}
 
 	return br
 }
@@ -296,31 +278,3 @@ func buildStacksReport(stackMgr *stacks.Manager) StacksReport {
 	return sr
 }
 
-// parseSizeToMB parses a formatted size string like "1.5 GB", "512.0 MB" into MB.
-func parseSizeToMB(s string) int64 {
-	s = strings.TrimSpace(s)
-	if s == "" {
-		return 0
-	}
-
-	parts := strings.Fields(s)
-	if len(parts) != 2 {
-		return 0
-	}
-
-	val, err := strconv.ParseFloat(parts[0], 64)
-	if err != nil {
-		return 0
-	}
-
-	switch strings.ToUpper(parts[1]) {
-	case "GB":
-		return int64(val * 1024)
-	case "MB":
-		return int64(val)
-	case "KB":
-		return int64(val / 1024)
-	default:
-		return int64(val)
-	}
-}