ultix perf/ops workbench: complete 2026-08-31 optimization pass for VM 5111

Everything for the ultix-streaming (VM 5111, pfv-tsys5) performance pass:
full report + host audit results, staged/gated configs, guest prep + host
one-shot + post-reboot-fix + netcheck lifecycle scripts, grow-root manual
runbook, rolling tracking HUD, questions v1, and the gateway boot-race
hardening units. Applied and verified live 2026-08-31; open work is
tracked in Redmine project 55 as #601-#607. [#602]

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

4-host-netcheck.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# Read-only host check: why did the net multiqueue flags not land on VM 5111?
+# Run from the guest:  ~/optimize/4-host-netcheck.sh
+# Everything is saved to ~/optimize/host-netcheck.out for crush to read.
+set -euo pipefail
+OUT="$(cd "$(dirname "$0")" && pwd)/host-netcheck.out"
+timeout 120 ssh root@pfv-tsys5.knel.net '
+  echo "== qm config 5111 (relevant lines) =="
+  qm config 5111 | grep -E "^(net|scsi|onboot|startup|cpuunits|ide|machine|cores|sockets|threads|memory)" || true
+  echo
+  echo "== qm pending 5111 (unapplied staged changes) =="
+  qm pending 5111 2>&1 || true
+  echo
+  echo "== last bounce log (/var/log/ukrrs-vm5111-bounce.log) =="
+  tail -n 40 /var/log/ukrrs-vm5111-bounce.log 2>&1 || true
+  echo
+  echo "== pve version =="
+  pveversion 2>&1 | head -3
+' | tee "$OUT"
+echo
+echo "saved: $OUT"