Decommission the old Plex VM

Plex has run as a container on the Docker host since the 2026-09-16
migration. The old Debian 11 VM (10.100.0.24) is now retired per
plex-docker-migration.md section 9, steps 1, 2 and 4-7:

- removed from the Veeam "Backup VMs" job
- guest shut down gracefully, pre-migration snapshot removed and
  consolidated back to Plex.vmdk
- Guacamole "Plex SSH" connection deleted
- .24 / 10.50.0.31 DHCP leases released on the UDM

The VMDKs are deliberately kept until ~2026-10-15 so the VM remains a
one-command rollback; step 3 stays open until then.

Before powering the VM off, every integration was re-verified as
pointing at 10.100.0.35: Sonarr, Radarr, Tautulli, seerr, Uptime Kuma,
Homepage, Traefik and the UDM PLEX port-forward.

Section 9 gains a decommission log recording two behaviours that cost
time to work out: Veeam turns a removed job include into an explicit
Exclude tombstone rather than deleting it, and a plain sqlite3
integrity_check on a Plex library DB fails with "unknown tokenizer:
collating" because the stock binary lacks Plex's FTS collation - that
is not corruption.

ESXi port-group counts corrected (LAN_100 7->6, DATA_50 4->3), verified
by counting NICs on powered-on VMs.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

esxi.md

@@ -36,7 +36,7 @@ Carries VLAN-tagged traffic for management, LAN, IoT, and guest networks.
 | DEFAULT_0 | 0 (untagged) | 1 | 10.2.0.0/24 (ESXi mgmt) |
 | MGMT_1 | 0 (untagged) | 0 | — |
 | GUEST_3 | 3 | 0 | — |
-| LAN_100 | 100 | 7 | 10.100.0.0/24 |
+| LAN_100 | 100 | 6 | 10.100.0.0/24 |
 | IOT_200 | 200 | 1 | 10.200.0.0/24 |
 
 ### jumboFrameSwitch (vmnic5 — 25Gbps Mellanox, MTU 9000)
@@ -45,7 +45,7 @@ Dedicated storage network with jumbo frames. Switch port 32 is configured as a t
 
 | Port Group | VLAN ID | Active Ports | Subnet |
 |------------|---------|--------------|--------|
-| DATA_50 | 50 | 4 | 10.50.0.0/24 |
+| DATA_50 | 50 | 3 | 10.50.0.0/24 |
 
 All port groups: promiscuous mode=No, forged transmits=No, MAC changes=No.
 
@@ -68,15 +68,15 @@ All port groups: promiscuous mode=No, forged transmits=No, MAC changes=No.
 | DOCKER | Debian 12 | 22 | 32GB | 10.100.0.35 | 10.50.0.35 | Docker bridges: 172.18.0.1, 172.19.0.1 |
 | Veeam | Win Server 2025 | 8 | 8GB | 10.100.0.30 | 10.50.0.32 | — |
 | HA | Oracle Linux 6 | 16 | 16GB | 10.100.0.40 | — | Docker bridge: 172.30.32.1 |
-| Plex | Debian 11 | 8 | 8GB | 10.100.0.24 | 10.50.0.31 | — |
 | Ignition | Debian 11 | 4 | 16GB | 10.100.0.90 | — | IOT_200 NIC connected but no IP |
 | DevVM | Win 10 | 8 | 16GB | 10.100.0.47 | — | IOT_200: 10.200.0.47 |
 
 ### Powered Off
 
-| VM | Guest OS | CPU | RAM | Port Groups |
-|----|----------|-----|-----|-------------|
-| DevServer | Win Server 2022 | 12 | 32GB | LAN_100 |
+| VM | Guest OS | CPU | RAM | Port Groups | Notes |
+|----|----------|-----|-----|-------------|-------|
+| DevServer | Win Server 2022 | 12 | 32GB | LAN_100 | — |
+| Plex | Debian 11 | 8 | 8GB | LAN_100, DATA_50 | **Decommissioned 2026-09-17** — migrated to a container on DOCKER. Disks retained for rollback until ~2026-10-15, then delete. See [plex-docker-migration.md](plex-docker-migration.md) §9. |
 
 ## Per-VM Network Detail
 
@@ -103,11 +103,11 @@ All port groups: promiscuous mode=No, forged transmits=No, MAC changes=No.
 |-----|-----|------------|-----|
 | Adapter 2 | 00:0c:29:f3:f3:5b | LAN_100 | 10.100.0.40 |
 
-### Plex
-| NIC | MAC | Port Group | IPs |
+### Plex (decommissioned 2026-09-17, powered off)
+| NIC | MAC | Port Group | Former IP |
 |-----|-----|------------|-----|
-| Adapter 1 | 00:0c:29:4a:ef:3d | LAN_100 | 10.100.0.24 |
-| Adapter 2 | 00:0c:29:4a:ef:47 | DATA_50 | 10.50.0.31 |
+| Adapter 1 | 00:0c:29:4a:ef:3d | LAN_100 | 10.100.0.24 (lease released) |
+| Adapter 2 | 00:0c:29:4a:ef:47 | DATA_50 | 10.50.0.31 (lease released) |
 
 ### Ignition
 | NIC | MAC | Port Group | IPs |