core: preserve offline and power-fault node quarantine

infrastructure/core/node-maintenance.yaml

@@ -1,8 +1,53 @@
 # infrastructure/core/node-maintenance.yaml
-# Block new application placement while the measured runtime I/O faults remain.
+# Block new placement until offline, power and runtime-storage checks pass.
 # Existing workloads and storage DaemonSets are not drained by these resources.
 apiVersion: v1
 kind: Node
+metadata:
+  name: titan-04
+  labels:
+    hardware: rpi5
+    node-role.kubernetes.io/worker: "true"
+    longhorn-host: "true"
+  annotations:
+    kustomize.toolkit.fluxcd.io/ssa: Merge
+    kustomize.toolkit.fluxcd.io/prune: disabled
+    atlas.bstein.dev/maintenance-reason: "Fresh undervoltage events; verify power delivery under load before accepting new workloads."
+spec:
+  unschedulable: true
+---
+apiVersion: v1
+kind: Node
+metadata:
+  name: titan-05
+  labels:
+    hardware: rpi5
+    node-role.kubernetes.io/worker: "true"
+    longhorn-host: "true"
+  annotations:
+    kustomize.toolkit.fluxcd.io/ssa: Merge
+    kustomize.toolkit.fluxcd.io/prune: disabled
+    atlas.bstein.dev/maintenance-reason: "Offline; verify identity, power, storage and loaded operation before accepting new workloads."
+spec:
+  unschedulable: true
+---
+apiVersion: v1
+kind: Node
+metadata:
+  name: titan-06
+  labels:
+    hardware: rpi5
+    node-role.kubernetes.io/worker: "true"
+    longhorn-host: "true"
+  annotations:
+    kustomize.toolkit.fluxcd.io/ssa: Merge
+    kustomize.toolkit.fluxcd.io/prune: disabled
+    atlas.bstein.dev/maintenance-reason: "Offline; verify identity, power, storage and loaded operation before accepting new workloads."
+spec:
+  unschedulable: true
+---
+apiVersion: v1
+kind: Node
 metadata:
   name: titan-08
   labels: