lubelogger+homepage: dedicated PBS tokens

- backup job -> dedicated root@pam!lubelogger-backup token (DatastoreBackup);
  prune made non-fatal pending a group-scoped PBS prune-job (Datastore.Prune deferred).
- Homepage PBS widget -> homepage@pbs!widget (Datastore.Audit); Proxmox Beast
  (root@pam!homepage) left intact, deferred. Secrets in vault/.env only.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

homepage/services.yaml

@@ -142,7 +142,7 @@
         widget:
           type: proxmoxbackupserver
           url: https://192.168.99.153:8007
-          username: "root@pam!homepage"
+          username: "homepage@pbs!widget"
           password: {{HOMEPAGE_VAR_PROXMOX_BACKUP_SERVER_PASSWORD}}
           verify_ssl: false
           datastore: Synology-Remote