Expand description
Backup subsystem API: destinations, scheduled policies, the job ledger, and on-demand archive export.
Destinations + policies are managed by manager+; their listings (with destination credentials
MASKED) and the job/export ledger are readable by any authenticated principal. The actual
transfers run in the background backup service (crate::services::backup). All mutations are
written to the immutable audit log.