Prod: provision PVCs out of band (storageClass under operator control)

- Add server-ce/k8s/verso-prod-pvcs.yaml (mongo-data/redis-data/verso-data,
  ReadWriteOnce, storageClassName left for the operator to set — use a Ceph RBD
  block class).
- Drop the inline PVC definitions from deploy-verso-prod.yml so it won't fight
  the operator-provisioned PVCs; the deploy now assumes they already exist.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.gitea/workflows/deploy-verso-prod.yml

@@ -15,7 +15,8 @@ name: Build and Deploy Verso (prod)
 #   - Public self-registration stays off (CE default): friends-only, admin
 #     creates accounts / sends invites.
 #
-# Out of band (do once): create the `verso-smtp` Secret and a verso.alocoq.fr
+# Out of band (do once): create the PVCs (server-ce/k8s/verso-prod-pvcs.yaml,
+# with your storageClass), the `verso-smtp` Secret, and a verso.alocoq.fr
 # Ingress (see server-ce/k8s/verso-prod-ingress.example.yaml) + DNS.
 
 on:
@@ -136,42 +137,12 @@ jobs:
         run: |
           kubectl create namespace verso --dry-run=client -o yaml | kubectl apply -f -
 
-          # PVCs + Mongo/Redis. Applied idempotently — this step must never
-          # delete these, so project data survives every deploy.
+          # Mongo/Redis. Applied idempotently — this step must never delete
+          # these, so project data survives every deploy. The PVCs themselves
+          # are provisioned out of band (server-ce/k8s/verso-prod-pvcs.yaml) so
+          # the storageClass is under your control; this step assumes
+          # mongo-data / redis-data / verso-data already exist.
           cat <<'EOF' | kubectl apply -f -
-          apiVersion: v1
-          kind: PersistentVolumeClaim
-          metadata:
-            name: mongo-data
-            namespace: verso
-          spec:
-            accessModes: [ReadWriteOnce]
-            resources:
-              requests:
-                storage: 10Gi
-          ---
-          apiVersion: v1
-          kind: PersistentVolumeClaim
-          metadata:
-            name: redis-data
-            namespace: verso
-          spec:
-            accessModes: [ReadWriteOnce]
-            resources:
-              requests:
-                storage: 2Gi
-          ---
-          apiVersion: v1
-          kind: PersistentVolumeClaim
-          metadata:
-            name: verso-data
-            namespace: verso
-          spec:
-            accessModes: [ReadWriteOnce]
-            resources:
-              requests:
-                storage: 20Gi
-          ---
           apiVersion: apps/v1
           kind: Deployment
           metadata: