Add Harbor/Ceph runbooks and align single-node Ceph docs with abr deployment.

Document registry ingress split, image mirroring, loop OSD setup, and platform integration paths.

backend/helm/cloudhost-ceph/scripts/verify.sh

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOK_NS="rook-ceph"
+EXTRAS_NS="cloudhost-builds"
+
+echo "=== StorageClasses ==="
+kubectl get storageclass | grep -E 'NAME|rook-ceph' || true
+
+echo ""
+echo "=== Ceph status ==="
+kubectl -n "${ROOK_NS}" exec deploy/rook-ceph-tools -- ceph status 2>/dev/null || echo "(tools pod not ready yet)"
+
+echo ""
+echo "=== OSD / MON pods ==="
+kubectl -n "${ROOK_NS}" get pods -l app=rook-ceph-osd 2>/dev/null || kubectl -n "${ROOK_NS}" get pods | grep -E 'osd|mon|mgr|rgw' || true
+
+echo ""
+echo "=== Object bucket claim ==="
+kubectl -n "${EXTRAS_NS}" get obc,app-sources 2>/dev/null || kubectl -n "${EXTRAS_NS}" get obc 2>/dev/null || true
+
+echo ""
+echo "=== Platform credentials secret ==="
+if kubectl -n "${EXTRAS_NS}" get secret ceph-app-sources-credentials >/dev/null 2>&1; then
+  echo "Secret ceph-app-sources-credentials exists"
+  kubectl -n "${EXTRAS_NS}" get secret ceph-app-sources-credentials -o jsonpath='{.data.SOURCE_STORAGE_BUCKET}' | base64 -d
+  echo ""
+else
+  echo "Secret ceph-app-sources-credentials not ready — check bucket sync job:"
+  kubectl -n "${EXTRAS_NS}" get jobs,pods | grep bucket-sync || true
+fi
+
+echo ""
+echo "=== Suggested backend env ==="
+kubectl -n "${EXTRAS_NS}" get configmap cloudhost-ceph-integration -o yaml 2>/dev/null | sed -n '/PLATFORM_/p;/SOURCE_STORAGE_ENDPOINT/p' || true