chore: update media roles for incus (#294)

- prevent incus roles from exporting haproxy endpoints (for now)
- incus doesnt need to mount cephfs

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/294

hieradata/virtual/lxc.yaml

@@ -5,3 +5,12 @@ profiles::packages::include:
 
 # disable mlock for vault nodes on lxd/incus
 vault::disable_mlock: true
+
+hiera_exclude:
+  # exclude the media profiles which are just cephfs-mount-management
+  - profiles::media::lidar
+  - profiles::media::nzbget
+  - profiles::media::prowlarr
+  - profiles::media::radarr
+  - profiles::media::readarr
+  - profiles::media::sonarr