- internal/backup: weekly (configurable) snapshots via the existing VACUUM INTO
+ blob-strip path; restart-safe (only backs up if newest is older than the
interval), retains BACKUP_KEEP most recent, prunes the rest. Runs in a
background goroutine; failures are logged, never fatal.
- Config: BACKUP_DIR (./data/backups), BACKUP_INTERVAL (168h; 0 disables),
BACKUP_KEEP (8).
- Fix: blob-strip now clears attachments.image_data too, not just receipts.
- Fix: STORAGE_DIR is the storage ROOT (default ./data) — receipts/ and
attachments/ live under it; corrects the doubled-nesting from item 10.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>