media: add full library folder structure, store all secrets in Vault

- external-secrets: add qbittorrent, jellyfin, seerr keys from Vault
- pvc: document all media folder paths (movies, tv, anime, docs, standup, concerts, kids, music)
- jellyfin: init container creates all media subdirs on startup

servers/legion/k8s/media/pvc.yaml

@@ -1,4 +1,14 @@
 # Shared media PV — hostPath /media on Legion (single-node cluster)
+# Folder structure:
+#   /media/movies          — feature films
+#   /media/tv/shows        — TV series
+#   /media/tv/anime        — anime series
+#   /media/documentaries   — documentaries
+#   /media/standup         — stand-up comedy specials
+#   /media/concerts        — concerts & music videos
+#   /media/kids            — kids & family content
+#   /media/music           — audio music library
+#   /media/downloads       — qBittorrent working dir (complete/incomplete)
 apiVersion: v1
 kind: PersistentVolume
 metadata: