bundle: activate hacluster HA stack with API VIPs (workstream 2)

12 HA-eligible charms get VIPs from provider /22 range 10.12.4.224-.254
per D-003. ceph-radosgw HA deferred to v2 (.225 reserved).

Per-charm additions to options:
  barbican             vip 10.12.4.224  fqdn barbican.omega.dc0.vr0.cloud.neumatrix.local
  cinder               vip 10.12.4.226  fqdn cinder.omega.dc0.vr0...
  designate            vip 10.12.4.227  fqdn designate.omega.dc0.vr0...
  glance               vip 10.12.4.228  fqdn glance.omega.dc0.vr0...
  keystone             vip 10.12.4.229  fqdn keystone.omega.dc0.vr0...
  magnum               vip 10.12.4.230  fqdn magnum.omega.dc0.vr0...
  neutron-api          vip 10.12.4.231  fqdn neutron.omega.dc0.vr0...
  nova-cloud-controller vip 10.12.4.232 fqdn nova.omega.dc0.vr0...
  octavia              vip 10.12.4.233  fqdn octavia.omega.dc0.vr0...
  openstack-dashboard  vip 10.12.4.234  fqdn horizon.omega.dc0.vr0...
  placement            vip 10.12.4.235  fqdn placement.omega.dc0.vr0...
  vault                vip 10.12.4.236  fqdn vault.omega.dc0.vr0...

Structural fixes:
- vault, keystone, glance, placement: options: {} → options:
  (previous form would have failed YAML parse when vip was added)

Atomic uncomments:
- 12 hacluster subordinate apps (channel 2.4/stable per D-002)
- 12 :ha relations

v2-deferred (per workstream-2 decision):
- ceph-radosgw-hacluster app (commented)
- ceph-radosgw:ha relation (commented)
- 10.12.4.225 reserved as VIP slot for v2

NetBox VIP records queued post-deploy (engineer review on
ipv4-prefixes-import.py still pending). Tracked in
docs/netbox-vip-queue.md.

D-010 NetBox-upstream rule relaxed for v1 testcloud; will be
enforced for Roosevelt.