docs: add jail provisioning scripts from live migration learnings
Lessons captured from the 192.168.100.x → 10.0.1.x subnet migration:
- setup-db-jail.sh: add allow.sysvipc=1 (required for PostgreSQL shmget),
set postgresql_data in rc.conf, note postgres uid=770 in pkgbase jails
- setup-controlplane-jail.sh: new — node24, nullfs /home/<agent> mount,
npm-global auto-mounts via ZFS mountpoint (no fstab entry), rc.d service
- setup-llamacpp-jail.sh: new — llama-cpp pkg, ro models mount, creates
llama_chat rc.d (not shipped with pkg, needed for second instance :8081)
- setup-cms-jail.sh: new — nginx + node24, Strapi deferred
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
Build: pass | Tests: pass — Tests 431 passed (431)