feat: add storage:set, storage:exec, storage:wait, storage:report --global

storage:set is the in-place editor for an existing entry; size grows are passed through to a helm upgrade and Kubernetes-incompatible swaps (access-mode, storage-class) are rejected up front. storage:exec spawns a throwaway container that mounts the entry: docker run on docker-local entries, kubectl run with a Pod-spec override on k3s, falling back to bash then sh when no command is supplied. storage:wait blocks until a k3s entry's PVC reports Bound via the storage-status trigger, with a docker-local fast path that just checks the host directory. storage:report --global enumerates every registered entry and the apps that mount it, in text or JSON form.

plugins/storage/src/commands/commands.go

@@ -21,12 +21,15 @@ Additional commands:`
     storage:create <name> [<path>] [flags], Register a named storage entry
     storage:destroy <name>, Remove a named storage entry (must be unmounted from every app first)
     storage:ensure-directory [--chown option] <directory>, [DEPRECATED] use storage:create instead
+    storage:exec <name> [-- <cmd>...], Run a command (or shell) in a temporary container that mounts the entry
     storage:info <name> [--format text|json], Show details for one storage entry
     storage:list <app> [--format text|json], List bind mounts for app's container(s) (host:container)
     storage:list-entries [--scheduler s] [--format text|json], List registered storage entries
     storage:mount <app> <host-dir:container-dir>, Create a new bind mount
     storage:report [<app>] [<flag>], Displays a storage report for one or more apps
-    storage:unmount <app> <host-dir:container-dir>, Remove an existing bind mount`
+    storage:set <name> [flags], Update a storage entry in place
+    storage:unmount <app> <host-dir:container-dir>, Remove an existing bind mount
+    storage:wait <name>, Wait for a storage entry's PVC to be bound (k3s)`
 )
 
 func main() {