fix(audit): correct expected-user model — root for appliances, labuser

era stlpc uses root, pfvsvrpi is localuser not subodev [#446]

Probed root access on every host where localuser failed: all Proxmox
appliance VMs (PDM/PMG/PBS), stlpc-artroom/garage, pfv-jetson-nano-1,
and ultix-field accept root key auth; pfvsvrpi takes localuser with
passwordless sudo. Audit now models this correctly — 65 of 74 green.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

scripts/audit-fleet.sh

@@ -45,7 +45,13 @@ classify() {
             printf '%s' "root prox" ;;
         pfv-proxmox-backup-server|sectestbed-proxmox-pve)
             printf '%s' "root vm" ;;
-        pfvsvrpi|subopi3|subopi-dev-3|subopi-dev-4|pfv-jetson-nano-1)
+        *-proxmox-datacenter|*-proxmox-mailgw*|*-proxmox-pbs)
+            printf '%s' "root vm" ;;
+        stlpc-*)
+            printf '%s' "root vm" ;;
+        pfvsvrpi)
+            printf '%s' "localuser vm" ;;
+        subopi3|subopi-dev-3|subopi-dev-4|pfv-jetson-nano-1)
             printf '%s' "subodev vm" ;;
         pfv-netinfra-01) printf '%s' "localuser dns1" ;;
         pfv-netinfra-02) printf '%s' "localuser dns2" ;;