feat(cluster): PG Logical Replication + VIP/Keepalived + config_hash sync (v1.2.1–1.2.2)

- PG Logical Replication: edgeguard_shared PUBLICATION auf Primary,
  edgeguard_sub SUBSCRIPTION auf Secondary. Nur geteilte Config-Tabellen
  werden repliziert; node-eigene Daten (network_interfaces, ip_addresses,
  static_routes, cluster_settings, dns_settings, ntp_settings) bleiben
  lokal — OPNsense-Muster.
- cluster-init-replication: Erstellt PUBLICATION, Rolle + pg_hba-Einträge
  (logical + replication), WAL-Level auf logical.
- cluster-setup-standby: Erstellt SUBSCRIPTION (copy_data=true), pollt
  pg_subscription_rel bis alle Tabellen sync = 'r', rendert dann Configs.
- promote: manueller Failover via pg_promote() + touch recovery.signal.
- VIP/Keepalived: cluster_settings-Tabelle (vip_address, vip_interface,
  vrrp_router_id), /cluster/vip-settings API, Keepalived-Config-Generator
  mit VRRP + check_script + notify-Skripten in /usr/lib/edgeguard/scripts/.
- config_hash sync: Secondary pusht alle 5 Min seinen Hash via mTLS an
  Primary (PushSelfToPrimary). Heartbeat schreibt nur LOCAL, daher ohne
  aktiven Push wäre Primary-Sicht des Secondary-Hash stale gewesen.
- runSecondaryConfigRender: Goroutine auf Secondary rendert HAProxy+nftables
  neu wenn config_hash sich ändert (Logical-Replication-Nachzügler).
- confighash: node-spezifische Tabellen aus hashSpec entfernt.
- postinst: Keepalived-Skripte installieren, sudoers für keepalived.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

management-ui/src/pages/Cluster/index.tsx

@@ -22,6 +22,7 @@ interface HANode {
   internal_ip?: string | null
   mgmt_ip?: string | null
   role: string
+  pg_role: 'standalone' | 'primary' | 'standby'
   version?: string | null
   config_hash?: string | null
   status: 'online' | 'offline' | 'joining' | 'leaving' | 'unknown'
@@ -291,6 +292,13 @@ export default function ClusterPage() {
       title: t('cluster.col.role'), dataIndex: 'role', width: 110,
       render: (v: string) => <Tag color={v === 'primary' ? 'gold' : 'default'}>{v}</Tag>,
     },
+    {
+      title: t('cluster.col.pgRole'), dataIndex: 'pg_role', width: 110,
+      render: (v?: string) => {
+        if (!v || v === 'standalone') return <Tag>{t('cluster.pgRole.standalone')}</Tag>
+        return <Tag color={v === 'primary' ? 'blue' : 'cyan'}>{t(`cluster.pgRole.${v}`)}</Tag>
+      },
+    },
     {
       title: t('cluster.col.version'), dataIndex: 'version', width: 100,
       render: (v?: string | null) => v ? <Tag>{v}</Tag> : <Text type="secondary">—</Text>,
@@ -525,6 +533,13 @@ export default function ClusterPage() {
                   {data.local_node.role}
                 </Tag>
               </Descriptions.Item>
+              <Descriptions.Item label={t('cluster.col.pgRole')}>
+                {(() => {
+                  const v = data.local_node.pg_role
+                  if (!v || v === 'standalone') return <Tag>{t('cluster.pgRole.standalone')}</Tag>
+                  return <Tag color={v === 'primary' ? 'blue' : 'cyan'}>{t(`cluster.pgRole.${v}`)}</Tag>
+                })()}
+              </Descriptions.Item>
               <Descriptions.Item label={t('cluster.col.version')}>
                 {data.local_node.version ? <Tag>{data.local_node.version}</Tag> : '—'}
               </Descriptions.Item>