production/storage: Deploy read-write instance on rancher agent saam

This is to be run exclusively on saam due to the access to the pathslicing mounted
there.

This enhances the actual template to be able to provide specific node selector and
specific volume mountpoints to add to the main container.

Refs. swh/infra/sysadm-environment#5215