Fix disk overcommit, migration rollback and host recovery gaps

Placement could give the same free disk space to many VMs, and a full pool then broke every guest. Metal now reports pool size less every provisioned disk, and migration rollback and host recovery are fixed.