Support startup taint

[hrak]

Something similar to kubernetes-sigs/aws-ebs-csi-driver#1232

[diranged]

Rather than each CSI driver implementing its own startup taint removal, Vigil handles this generically for all DaemonSets. It watches for nodes with a startup taint, auto-discovers which DaemonSets should be running on each node (using K8s scheduling predicates), and removes the taint once they're all Ready.

This means the cloudstack-csi-driver doesn't need to implement untaint logic itself — Vigil covers it alongside your CNI, monitoring agents, and any other DaemonSets.

Setup: configure your node provisioner to apply a startup taint, deploy Vigil, done.

More detail: https://blog.wiredgeek.net/kubernetes/infrastructure/2026/03/31/kubernetes-node-readiness-with-vigil.html