fix: sync only running banking LXCs 5825-5828 on r630-03

Load CTIDs from config, ensure containers are running before pct push, and skip missing legacy IDs instead of failing the whole sync.

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/deployment/lib/omnl-pve-ssh.sh

@@ -57,3 +57,26 @@ omnl_pve_preflight() {
     return 1
   }
 }
+
+omnl_pve_ensure_ct_running() {
+  local ctid="$1"
+  local status
+  status="$(omnl_pve_ssh "pct status ${ctid} 2>/dev/null || true")"
+  if [[ -z "$status" ]]; then
+    echo "CT ${ctid} does not exist on ${OMNL_PVE_SSH_TARGET} — skip" >&2
+    return 1
+  fi
+  if [[ "$status" == *"status: running"* ]]; then
+    return 0
+  fi
+  if [[ "$status" == *"status: stopped"* ]]; then
+    log_msg "Starting stopped CT ${ctid}..."
+    omnl_pve_ssh "pct start ${ctid}"
+    sleep 3
+    return 0
+  fi
+  echo "CT ${ctid} is not runnable (${status})" >&2
+  return 1
+}
+
+log_msg() { echo "[$(date -Iseconds)] $*" >&2; }