Closes#25
- check_backup_recency(): queries pvesh vzdump task history; flags VMs
with no backup (CRIT) or no backup in 7 days (WARN)
- check_cert_expiry(): probes ports 443/8443 per host via openssl;
flags certs expiring ≤14 days (WARN) or ≤7 days (CRIT)
- io_wait_pct() in COLLECTOR_SCRIPT: uses vmstat 1 2 to sample I/O
wait; flagged as WARN when > 20%
- OOM kill history was already collected via journalctl; no changes needed
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>