proxmox: review fixes, real-host validation record, changelog

Phase 10. Two review passes (go-operator-reviewer, /code-review high)
over the branch, recorded in docs/reviews/2026-09-23-proxmox-provider-review/:
9 findings fixed, 3 accepted as documented limits, 7 rejected with a
reason.

- Delete removes the seed between the stop and the destroy, so a failed
  seed delete leaves the VM for the next Delete instead of leaking the
  ISO; a Permanent refusal on the every-node path fails the call.
- Create skips a probe VMID whose listed name is someone else's without
  waiting on its lock.
- The three answers Phase 0 never captured are fixtures now: a missing
  storage is a 400 (the Checker reports StorageNotFound), a hibernated
  VM is destroyable (Delete destroys ours), a paused VM stops.
- TestProxmox_lifecycle and TestProxmoxCheck_realHost passed on pv1-1
  (PVE 9.2.20); the docs record the run and drop "not yet run".

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

internal/provider/proxmox/get.go

@@ -49,7 +49,7 @@ func (p *Provider) get(ctx context.Context, log logr.Logger, vmid int, name stri
 		return nil, transientf("VM %d is locked (%s)", vmid, r.Lock)
 	}
 	if r.Status == "unknown" {
-		return nil, transientf("VM %d has status unknown: its node %s is not answering", vmid, r.Node)
+		return nil, transientf("VM %d has status unknown: its node %s is not answering, or the VM is too new to be reported yet", vmid, r.Node)
 	}
 	cfg, err := p.api.VMConfig(ctx, r.Node, vmid)
 	if err != nil {
@@ -78,7 +78,7 @@ func (p *Provider) get(ctx context.Context, log logr.Logger, vmid int, name stri
 	if err != nil {
 		return nil, fmt.Errorf("reading status of VM %d: %w", vmid, err)
 	}
-	if st.Status == "running" && (st.QMPStatus == "running" || st.QMPStatus == "") {
+	if guestRunning(st.Status, st.QMPStatus) {
 		ip, state, err := p.agentAddress(ctx, log, r.Node, vmid)
 		if err != nil {
 			return nil, err