fix(storage): add longhorn-wffc SC + pin portainer/forgejo-runner to az-a — fixes PVC attach

k8s/applications/portainer/portainer-values.yaml

@@ -33,7 +33,7 @@ tls:
 # RWO block volume. 10Gi is generous for config data but cheap on Longhorn.
 persistence:
   enabled: true
-  storageClass: "longhorn"
+  storageClass: "longhorn-wffc"
   size: 10Gi
 
 resources:
@@ -51,3 +51,8 @@ tolerations:
   - key: node-role.kubernetes.io/control-plane
     operator: Exists
     effect: NoSchedule
+
+# Pin to az-a (talos-cp-1) — sole Longhorn storage node. Its RWO PVC can only
+# attach there; without this the pod may land on cp-2/cp-3 and fail to mount.
+nodeSelector:
+  topology.kubernetes.io/zone: az-a