fix(build): improve resilience for top Proxmox error codes (209, 215, 118, 206)

- Exit 209 (container creation failed): Detect CTID collision when
  pct create fails with 'already exists' and auto-retry with next
  available ID instead of aborting

- Exit 215 (ghost state): Add 10s polling loop for pct list visibility
  after successful pct create to handle pmxcfs sync delays in clusters,
  instead of failing immediately

- Exit 118 (no IP after timeout): Increase IP wait from 20s fixed to
  60 attempts with progressive backoff (1s/2s/3s intervals, ~100s max),
  giving slow DHCP servers and cold-start containers more time

- Exit 206 (CTID already in use): Auto-reassign to next available
  container ID instead of hard-failing when a late collision is detected
  in create_lxc_container()

These four error codes account for ~15% of all installation failures
(~1200 errors in analytics). The fixes add automatic recovery for race
conditions and timing issues that users cannot control.

misc/build.func

@@ -4018,7 +4018,7 @@ EOF
 
     # Wait for IP assignment (IPv4 or IPv6)
     local ip_in_lxc=""
-    for i in {1..20}; do
+    for i in {1..60}; do
       # Try IPv4 first
       ip_in_lxc=$(pct exec "$CTID" -- ip -4 addr show dev eth0 2>/dev/null | awk '/inet / {print $2}' | cut -d/ -f1)
       # Fallback to IPv6 if IPv4 not available
@@ -4026,11 +4026,18 @@ EOF
         ip_in_lxc=$(pct exec "$CTID" -- ip -6 addr show dev eth0 scope global 2>/dev/null | awk '/inet6 / {print $2}' | cut -d/ -f1 | head -n1)
       fi
       [ -n "$ip_in_lxc" ] && break
+      # Progressive backoff: 1s for first 20, 2s for next 20, 3s for last 20
+      if [ "$i" -le 20 ]; then
         sleep 1
+      elif [ "$i" -le 40 ]; then
+        sleep 2
+      else
+        sleep 3
+      fi
     done
 
     if [ -z "$ip_in_lxc" ]; then
-      msg_error "No IP assigned to CT $CTID after 20s"
+      msg_error "No IP assigned to CT $CTID after 60 attempts"
       msg_custom "🔧" "${YW}" "Troubleshooting:"
       echo "  • Verify bridge ${BRG} exists and has connectivity"
       echo "  • Check if DHCP server is reachable (if using DHCP)"
@@ -5261,9 +5268,10 @@ create_lxc_container() {
     exit 205
   }
   if qm status "$CTID" &>/dev/null || pct status "$CTID" &>/dev/null; then
-    unset CTID
+    msg_warn "Container/VM ID $CTID is already in use (detected late). Reassigning..."
-    msg_error "Cannot use ID that is already in use."
+    CTID=$(get_valid_container_id "$((CTID + 1))")
-    exit 206
+    export CTID
+    msg_ok "Reassigned to container ID $CTID"
   fi
 
   # Report installation start to API early - captures failures in storage/template/create
@@ -5739,7 +5747,22 @@ create_lxc_container() {
   if ! pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >"$LOGFILE" 2>&1; then
     msg_debug "Container creation failed on ${TEMPLATE_STORAGE}. Checking error..."
 
-    # Check if template issue - retry with fresh download
+    # Check if CTID collision (race condition: ID claimed between validation and creation)
+    if grep -qiE 'already exists|already in use' "$LOGFILE"; then
+      local old_ctid="$CTID"
+      CTID=$(get_valid_container_id "$((CTID + 1))")
+      export CTID
+      msg_warn "Container ID $old_ctid was claimed by another process. Retrying with ID $CTID"
+      LOGFILE="/tmp/pct_create_${CTID}_$(date +%Y%m%d_%H%M%S)_${SESSION_ID}.log"
+      if pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >"$LOGFILE" 2>&1; then
+        msg_ok "Container successfully created with new ID $CTID"
+      else
+        msg_error "Container creation failed even with new ID $CTID. See $LOGFILE"
+        _flush_pct_log
+        exit 209
+      fi
+    else
+      # Not a CTID collision - check if template issue and retry with fresh download
       if grep -qiE 'unable to open|corrupt|invalid' "$LOGFILE"; then
         msg_info "Template may be corrupted – re-downloading"
         rm -f "$TEMPLATE_PATH"
@@ -5826,14 +5849,24 @@ create_lxc_container() {
       else
         msg_ok "Container successfully created after template repair."
       fi
+    fi # close CTID collision else-branch
   fi
 
-  # Verify container exists
+  # Verify container exists (allow up to 10s for pmxcfs sync in clusters)
-  pct list | awk '{print $1}' | grep -qx "$CTID" || {
+  local _pct_visible=false
-    msg_error "Container ID $CTID not listed in 'pct list'. See $LOGFILE"
+  for _pct_check in {1..10}; do
+    if pct list | awk '{print $1}' | grep -qx "$CTID"; then
+      _pct_visible=true
+      break
+    fi
+    sleep 1
+  done
+  if [[ "$_pct_visible" != true ]]; then
+    msg_error "Container ID $CTID not listed in 'pct list' after 10s. See $LOGFILE"
+    msg_custom "🔧" "${YW}" "This can happen in clusters with pmxcfs sync delays."
     _flush_pct_log
     exit 215
-  }
+  fi
 
   # Verify config rootfs
   grep -q '^rootfs:' "/etc/pve/lxc/$CTID.conf" || {