Freeze lab-tested PostgreSQL plugin engine

Extract PostgreSQL, Podman runtime and systemd lifecycle adapters while preserving existing lifecycle and scoring behavior. Update RPM layout and add guarded operator-run lab harnesses.

Record successful manual stop/start, promotion, demotion and rewind-only rejoin with pinned installed hashes. The unfenced lab does not validate automatic failover, Pacemaker-managed transitions or divergent-data rewind.

Validation: 103 offline tests, original-function differential checks, checksum manifest and whitespace checks passed.

tests/test_promotion_scores.py

@@ -12,9 +12,7 @@ import unittest
 
 ROOT = Path(__file__).resolve().parents[1]
 AGENT = ROOT / 'refactored/managed-container'
-MODULES = ('common', 'container', 'postgres', 'auth', 'replication', 'notify', 'promote', 'demote', 'rejoin')
-LOAD = 'MC_PROMOTION_RESOURCE_INSTANCE="${OCF_RESOURCE_INSTANCE:-}"\n: "${OCF_ROOT:=/usr/lib/ocf}"\n. "$OCF_ROOT/lib/heartbeat/ocf-shellfuncs"\n: "${OCF_RUNNING_PROMOTED:=${OCF_RUNNING_MASTER:-8}}"\n'
-LOAD += '\n'.join('. ' + shlex.quote(str(AGENT.parent / 'managed-container.d' / (m + '.sh'))) for m in MODULES)
+from plugin_test_support import LOAD
 
 CRM = '''#!/usr/bin/env python3
 import json, os, sys
@@ -282,7 +280,7 @@ class Scores(unittest.TestCase):
         for action in ('monitor', 'status'):
             code = 'mc_promotion_monitor() { echo scored-monitor; return 8; }; set -- ' + action + '\ncase "$1" in' + dispatch
             self.assertEqual(self.run_shell(code, 8).stdout.strip(), 'scored-monitor')
-        for action, handler in [('meta-data', 'mc_promotion_metadata'), ('validate-all', 'mc_promotion_validate'), ('notify', 'managed_notify')]:
+        for action, handler in [('meta-data', 'mc_engine_metadata'), ('validate-all', 'mc_promotion_validate'), ('notify', 'mc_application_notify')]:
             code = handler + '() { echo plain; return 0; }; set -- ' + action + '\ncase "$1" in' + dispatch
             self.assertEqual(self.run_shell(code).stdout.strip(), 'plain')
         self.assertFalse(self.state()['calls'])