feat(os): profils Proxmox/RPi + machine_probe + proxy persistent (tâche 2 SJ-7)

- templates proxmox/ (update-analyze: dépôts PVE ; full-upgrade) et raspbian/
  (update-analyze: espace disque ; full-upgrade)
- execute résout les actions APT par profil OS (resolveTemplate) → proxmox/
  raspbian si dispo, sinon fallback apt/ (non-régression debian/ubuntu vérifiée)
- machine_probe (lecture seule) : template + parseProbe/proposeCorrections (TDD)
  → propose os_family/machine_kind/virtualization, persiste machine_hardware,
  n'applique jamais auto ; branche execute + allowlist route
- apt_proxy_persistent : ActionType + template idempotent (/etc/apt/apt.conf.d/
  01proxy, backup) + TemplateVars.aptProxyUrl + allowlist route

tsc 0 · 95 tests · build OK · résolution OS vérifiée.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

shared/types.ts

@@ -8,6 +8,7 @@ export type ActionType =
   | "apt_autoremove" | "apt_clean" | "reboot_verified"
   | "docker_scan" | "docker_inspect_current" | "docker_pull_check"
   | "docker_compose_apply" | "docker_prune_images" | "docker_compose_down"
+  | "apt_proxy_persistent"
   | "machine_probe" | "post_install";
 export type ExecutionStatus = "ok" | "warning" | "error";
 export type ApiClientScope = "read" | "operate" | "admin" | "debug";