Freeze lab-tested PostgreSQL plugin engine

Extract PostgreSQL, Podman runtime and systemd lifecycle adapters while preserving existing lifecycle and scoring behavior. Update RPM layout and add guarded operator-run lab harnesses.

Record successful manual stop/start, promotion, demotion and rewind-only rejoin with pinned installed hashes. The unfenced lab does not validate automatic failover, Pacemaker-managed transitions or divergent-data rewind.

Validation: 103 offline tests, original-function differential checks, checksum manifest and whitespace checks passed.

refactored/managed-container

@@ -26,18 +26,19 @@ MC_PROMOTION_RESOURCE_INSTANCE="${OCF_RESOURCE_INSTANCE:-}"
 
 # Resolve modules relative to this entrypoint, independent of Pacemaker's cwd.
 MC_MODULE_DIR="$(CDPATH= cd -- "$(command dirname -- "${BASH_SOURCE[0]}")" && pwd)/managed-container.d"
-for MC_MODULE in common container postgres auth replication notify promote demote rejoin; do
+for MC_MODULE in common container engine; do
     if ! . "${MC_MODULE_DIR}/${MC_MODULE}.sh"; then
         ocf_exit_reason "Unable to load resource-agent module ${MC_MODULE_DIR}/${MC_MODULE}.sh"
         exit "${OCF_ERR_CONFIGURED}"
     fi
 done
 unset MC_MODULE
+mc_engine_load || exit $?
 
 case "$1" in
     meta-data)
-        mc_promotion_metadata
-        exit "${OCF_SUCCESS}"
+        mc_engine_metadata
+        exit $?
         ;;
 
     validate-all)
@@ -71,7 +72,7 @@ case "$1" in
         ;;
 
     notify)
-        managed_notify
+        mc_application_notify
         exit $?
         ;;