feat(v2): add mtv_maps role for StorageMap and NetworkMap CRs

[tech2734]

Summary

• Adds a new mtv_maps role that creates Forklift/MTV StorageMap and NetworkMap custom resources on target OpenShift clusters
• Queries the MTV inventory (via mtv_query_inventory) for datastores, storage classes, networks, and NADs, then builds and applies the mapping CRs
• Integrates with aap_seed by adding a new "MTV Maps" job template definition

Key Features

• Single or multiple named storage maps with per-datastore storage class overrides
• Network map with annotation-based NAD auto-matching (infra.openshift-virtualization-migration/source-portgroup)
• Include/exclude filtering for both storage and network entries
• Default storage class auto-detection from cluster annotation
• Block/rescue error handling with full diagnostic context output
• OpenShift connection variable cascade from K8S_AUTH_* env vars (AAP credential injection)
• Full argument_specs validation (17 documented parameters)

Dependencies

• Requires mtv_query_inventory role (feat(v2): MTV query inventory role #75) for MTV inventory queries
• Uses rfc1123 filter from the collection

Test Plan

• Validated against homelab environment (Forklift 2.8.7)
  • StorageMap: 9 datastore→storageClass mappings created
  • NetworkMap: 4 network→pod mappings created
  • ok=88 changed=2 failed=0 rescued=0
• Test idempotency (re-run, expect changed=0)
• Test with network map overrides (explicit multus/pod destinations)
• Test multiple named storage maps
• Test include/exclude filtering
• Test from AAP with credential injection
• Verify rescue block output on intentional failure

Note on mtv_query_inventory endpoint regex

During testing, the mtv_query_inventory role's endpoint path validation regex was found to reject query parameters (?detail=4). This needs to be addressed in PR #75 before this role can work end-to-end from AAP.