arrstack: rebuild adult tier on the shared-Postgres pattern

Replace the legacy adult sonarr/radarr/nzbget with the kids-tier pattern
(active-active -unkin fork on shared arrstack-postgres + Valkey, S3
MediaCover/Backup, exportarr metrics). The old adult apps held no data, so
the wipe is sanctioned.

- add sonarr-adult/radarr-adult/nzbget-adult (copies of the *-kids dirs):
  own DBs sonarr-adult-main/radarr-adult-main, Vault paths
  .../default/{sonarr,radarr}-adult(+-db), S3 prefixes sonarr-adult/
  radarr-adult, UrlBase + probe + exportarr paths /3aa168/{sonarr,radarr},
  media subPaths tvshows/adult + movies/adult, nzbget config PVC on
  cephrbd-fast-delete
- postgres: add managed roles sonarr-adult/radarr-adult, Database CRDs
  {sonarr,radarr}-adult-main, VaultStaticSecrets {sonarr,radarr}-adult-db
- remove legacy sonarr/radarr/nzbget dirs (incl. their gateway/httproute),
  managed roles sonarr/radarr, databases {sonarr,radarr}-main, VSS
  {sonarr,radarr}-db, and all kustomization entries

apps/base/arrstack/postgres/cnpg_cluster.yaml

@@ -50,30 +50,6 @@ spec:
       owner: app
   managed:
     roles:
-      - name: sonarr
-        ensure: present
-        comment: Sonarr application role (owns sonarr-main)
-        login: true
-        superuser: false
-        createdb: false
-        createrole: false
-        inherit: true
-        replication: false
-        connectionLimit: -1
-        passwordSecret:
-          name: sonarr-db
-      - name: radarr
-        ensure: present
-        comment: Radarr application role (owns radarr-main)
-        login: true
-        superuser: false
-        createdb: false
-        createrole: false
-        inherit: true
-        replication: false
-        connectionLimit: -1
-        passwordSecret:
-          name: radarr-db
       - name: prowlarr
         ensure: present
         comment: Prowlarr application role (owns prowlarr-main)
@@ -110,6 +86,30 @@ spec:
         connectionLimit: -1
         passwordSecret:
           name: radarr-kids-db
+      - name: sonarr-adult
+        ensure: present
+        comment: Sonarr (adult) application role (owns sonarr-adult-main)
+        login: true
+        superuser: false
+        createdb: false
+        createrole: false
+        inherit: true
+        replication: false
+        connectionLimit: -1
+        passwordSecret:
+          name: sonarr-adult-db
+      - name: radarr-adult
+        ensure: present
+        comment: Radarr (adult) application role (owns radarr-adult-main)
+        login: true
+        superuser: false
+        createdb: false
+        createrole: false
+        inherit: true
+        replication: false
+        connectionLimit: -1
+        passwordSecret:
+          name: radarr-adult-db
   enablePDB: true
   enableSuperuserAccess: false
   failoverDelay: 0