chore: migrate media applications

- migrate media applications to new cephfs pool + incus
- enable exporting haproxy
- move ceph-client-setup to only apply to non-lxc hosts
- ensure unrar is installed for nzbget
- updated jellyfin use of data_dir
- set lxc instances for jellyfin to use /shared/apps/jellyfin

hieradata/virtual/lxc.yaml

@@ -6,11 +6,5 @@ profiles::packages::include:
 # disable mlock for vault nodes on lxd/incus
 vault::disable_mlock: true
 
-hiera_exclude:
-  # exclude the media profiles which are just cephfs-mount-management
-  - profiles::media::lidarr
-  - profiles::media::nzbget
-  - profiles::media::prowlarr
-  - profiles::media::radarr
-  - profiles::media::readarr
-  - profiles::media::sonarr
+# manage jellyfin changes
+profiles::media::jellyfin::data_dir: /shared/apps/jellyfin