Adds the full smoke-test surface: create + clone + destroy.
Tier 1 read (1 new):
- proxmox_list_templates
Tier 2 safe-write (3 new):
- proxmox_create_container
- proxmox_create_vm
- proxmox_clone_resource
Tier 3 destructive (3 new, triple-gated):
- proxmox_destroy_resource
- proxmox_delete_snapshot
- proxmox_force_stop_resource
Tier 3 tools require PROXMOX_ENABLE_DESTRUCTIVE=1 env flag in addition to the per-tool confirm + destructive args.
For tier 2, the PVE token needs PVEVMAdmin role at path /. For tier 3, PVEVMAdmin + env flag.