fix: verify device identity before mounting

[lukasmetzner]

The /dev/disk/by-id symlinks are maintained asynchronously by udev, so
after an attach that reuses a device name, the symlink of one volume can
still resolve to the block device of another.

The resolved device is now checked against the volume ID taken from the
by-id path by reading its SCSI serial from VPD page 0x80 in
/sys/class/block/<device>/device/vpd_pg80. A mismatch is retried
through the existing waitDeviceReady backoff, which is where a symlink
udev has not caught up with yet becomes correct.

The check is fail-closed: if the serial cannot be read, the volume is
not published rather than published unverified, because mounting the
wrong device destroys data while refusing to mount does not. Devices
that do not expose vpd_pg80 are therefore no longer published.

Fixes #1346

[codecov]

Codecov Report

❌ Patch coverage is 87.01299% with 10 lines in your changes missing coverage. Please review.
✅ Project coverage is 73.51%. Comparing base (b9a310c) to head (8255783).

Files with missing lines	Patch %	Lines
internal/volumes/deviceidentity.go	83.72%	6 Missing and 1 partial ⚠️
internal/volumes/mount.go	90.62%	2 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1457      +/-   ##
==========================================
+ Coverage   72.59%   73.51%   +0.92%     
==========================================
  Files          17       18       +1     
  Lines        1529     1586      +57     
==========================================
+ Hits         1110     1166      +56     
  Misses        329      329              
- Partials       90       91       +1     

Flag	Coverage Δ
e2e-controller	57.18% <64.93%> (+0.54%)	⬆️
e2e-node	57.18% <64.93%> (+0.54%)	⬆️
integration	3.02% <0.00%> (-0.16%)	⬇️
unit	45.90% <85.71%> (+3.71%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.